<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1953">
<package pkgid="9128edcb9b435d96f5715735641b544c9536b7fabf28a07723b2a40f535df38e" name="ModemManager-debuginfo" arch="i686">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="9a5539eab8fd0f55c79599a3dafc14188cc8249f6f2bfd80ba6ed8a106308834" name="ModemManager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="3226fa1be70bc9b89016f55d84b24f906f9f98ed3a2a94c2956f36fa06561874" name="ModemManager-debugsource" arch="i686">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="ab7552faf805ba56c4ae290cbd7d63e6c78248284a41b4c9bb1713bd4ae55641" name="ModemManager-debugsource" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="ec01007f3804c2d4dca7bd1131eca47f4a0d631901c9d3413e68f7c3f1f305db" name="ModemManager-glib-debuginfo" arch="i686">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="70b1b89c2249709f7afb93b6f211573273b8f5d3ca519915cab10b263295297b" name="ModemManager-glib-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="34d85b2aac8abaec48106c380505cab712f23250089caa0d419c2671eab4fe94" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="4781f79fd77a74396c84738cd971edd65fe70c4d311871ed73e485d568880496" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="8477b7a2bcac55d7c2c0625293e2b50de89fd5491b5f0151fd5ab29967c97fcf" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="cdd9f7e9ff4b66743da100d4973febc028fb93a068d181108dbe7190ab96e33d" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="1b0d7156ecafa5c58cf916d3485f2709df94e38a02eace3239c5bfe88df5dc9c" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="08a70c9b00d8ba2f08d0815ff10e3dff96b9427e5eb30bdb431c4db67bc77512" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="1e76bff41a9ac77ff9309fb313fc9be29664ce1f3ca4d3a97db10251ff7d2e85" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="a009790221a105f8efb16e7a40a5f8e6e748526ba1996a14e283843c6a118045" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="26bcf277edcdd542ab177e53f0c065ca584c54926883803ed340e7bab5527f35" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="3a48020a0b8d4993ee1a2ade3489f9f45fd544b04f16dc85809cd2f204b30f8a" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="5c1eae2b584cfe463b52cff2d09c7b000cf888b924dbdb2783657096b29cdebd" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="a24f4c2f4ad20175e81a1ab0d1bff314fce6bc8ceb9dc13ef0e1e3c4a176cef4" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="7ecff87506a8b65020037957434a8b31c8bab736866c0f243fa520b31513766c" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="7b42bbbddf1373d1db18e9b998059a3a48c089b846dea77444da0a5bd5a09a08" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="da886616d57e9f0b657c2268dcd474db9a9f480ec2139f480a222e03244778f7" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="5d030fe6d860c32c420f91beee74c009f227b2ff4accf3d580ea30233e84eb61" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="4d44194920d50cd0b1e62a584a54518e7e1658c93f62f04a441e60906bea5fce" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="7fc1daef2ff72ccf92640bb69017ef915225bfa01b69c0b6366d99d854388970" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="5df900c895621da3d641397574e562ff3a39f605ffab6138733b11014842fab2" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="04797ded34065f8e1c89b2e8479e36d6f8cea6c56498939980dd65ac50ed3f61" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="bfbcab7b5baa0b6e20e88dabb46af63ac9c1fd56db697dc9bc544750da674762" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="36637d2527b832c98df7c419b76c99bbc9b87896abc02c7fce7bfa50480036e7" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="7f7ce79dd0e57ffc66a9cdbbed5f85c50576e35ebd5bd762f05a77f63c959408" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="38ce5e603cdca40717164d192610d6f0f0527ec35f83931fac252424e741ff74" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="0e8a3701b2269531386f4114fa039c54072844c093f2dd9cb13eca0faf13d402" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="40c4e8505b81a76bf1ecab58d1b5055e9b130536d2d93d13f806c97a6f01e4ff" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="38a6ff0a25d40746295c2639f659575ad9b4cae11880500d0ae7a893c9f11f0e" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="179ba13fc73ef439810205bce36ea132e97fd6aecaf9cec3809b702a3113ac10" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="3c2f7a8c68d1a2d30f68f6db3de82784d87b73efccedfe83c31e9d20457c631f" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="576abf99416ede49aae70484580da713a9279850a8d7ff6d876a9fe11d0f21f0" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="03e5b2dd82a3bf1f6f4f4838df4d2b04384644a6691e2420f795ad6059de77c0" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="5698e6c5d7bc20a0e72df5c2586c01b5385f30aec61e55fca1b87e21a60fcd3c" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="c3ad6aef5f14d35e440f79ac616b1adaeb3f289bae1c503d8b08a17a591afa8c" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="84f1a07fdbb8e25cbf25cbf345ca57ad7746d0301f43408c69859b3a47de7f9f" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="f3e16d79d1c5a31ae8942dd568b5ac1d7634eb395abb39ee632262f77db279fe" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="d9b95389989d25198d726c9b4728db70efe649491dd00d41550f6d7985c7072b" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="50bc8e00a2c0ad44765b263ef3c8bf55338d9e59f3799a08a985e5ea3d9e3f0c" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="8cdad394685ef19e34b15ecb67db3c0bb246d19c279bcc35fe7feda65691bf06" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="800286ce9b43b9b7e29b1b32d43de03772bae0aa673f8e36d915244481840ec2" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="92bac9d0d07aac4129c33594a03f234cbb9827b2b41e47df6c4e5548ef2076df" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="9d587269dc07e179e5c62c529db46a21d1d3bf1a1c0123072a2c2a7016e00cd4" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="98d2968545c78e6bc8836521ea3731f89d616303e8f351a56a0a04b7e8a05b5f" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="0153a9fd99c380cc5b013b0d6b50f9f6bb2257ab6b41acab3e76b5b84cd4e1d7" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="27bd797d0a266e4786cb04f72fd7c8f5ed3f091182fab7caac3d9675520a61b0" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="62f795e25bbaee0100ed8acac16342d932969bc529a2311df7e1cca35ac36498" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="2.el9"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-85765)
- Fix order of parsing port/controller properties in nmcli (RHEL-85767)
- Improve interface activation logic (RHEL-85766)
- Fix WireGuard IPv6 firewall rules (RHEL-85763)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
</package>
<package pkgid="a8fba022547d2872e23b0e51f030b97825b2605926da86b126c5eb5ba68e4efe" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="1f26f9844e197ef983b8a548a08092d74c1062fe891c5a676808fccc8ddb0505" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="d11a6f94dffe79f5c717e44e75c9f89730534ec29950eb81c45dd8b2162d791a" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="5.el9_8"/>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 1:1.54.3-5" date="1784721600">- Fix CVE-2026-10805 (RHEL-191624)</changelog>
</package>
<package pkgid="72bcf804bc5682135ae743145cf1b2013b2c91216355fb322f19f4c89c8cb046" name="PyYAML-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="6.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 5.3.1-5" date="1606132800">- Disable Python 2 build on RHEL 9+</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4-0.1.b1" date="1610625600">- New upstream beta release 5.4b1 (rhbz#1916034)</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4-0.1.b2" date="1610712000">- New upstream beta release 5.4b2 (rhbz#1916496)</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4-1" date="1611144000">- New upstream release 5.4
- Fixes CVE-2020-14343</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4.1-1" date="1611230400">- New upstream release 5.4.1 (rhbz#1918523)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.1-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 5.4.1-5" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Related: rhbz#1990421</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 5.4.1-6" date="1644321601">- Remove some outdated Obsoletes and Provides,
  but keep providing python3-yaml and python3-PyYAML for users
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="419362f0af1057e2746f3a9b7c877c52547240ebbecb2aece34aa1928759c499" name="accel-config-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.8" rel="2.el9"/>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-1" date="1681819200">- Rebase to the 3.5.3 release.
Resolves: rhbz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-2" date="1681819201">- Remove spec file variable that blocked debuginfo build
Resolves: rhz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-1" date="1701432000">- Rebase to 4.1.3 release
- Update License tags to SPDX identifiers
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-2" date="1705492800">- Fix SPDX tags
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711108800">- Rebase to 4.1.6 release
Resolves: RHEL-29910</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1714564800">- Fix faulty logic in dsa_user_test_runner device clean up.
- Adds a couple of test clean ups as well.
Resolves: RHEL-32451</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1725624000">- Rebase to 4.1.8 release
Resolves: RHEL-56316</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-2" date="1742212800">- Update to current stable.
  Resolves: RHEL-38577</changelog>
</package>
<package pkgid="06dd383f394e2defed2fe617293c9b14cfd494b597bd5abe4eca2dfb8fdaffe2" name="accel-config-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="2.el9"/>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-1" date="1681819200">- Rebase to the 3.5.3 release.
Resolves: rhbz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-2" date="1681819201">- Remove spec file variable that blocked debuginfo build
Resolves: rhz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-1" date="1701432000">- Rebase to 4.1.3 release
- Update License tags to SPDX identifiers
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-2" date="1705492800">- Fix SPDX tags
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711108800">- Rebase to 4.1.6 release
Resolves: RHEL-29910</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1714564800">- Fix faulty logic in dsa_user_test_runner device clean up.
- Adds a couple of test clean ups as well.
Resolves: RHEL-32451</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1725624000">- Rebase to 4.1.8 release
Resolves: RHEL-56316</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-2" date="1742212800">- Update to current stable.
  Resolves: RHEL-38577</changelog>
</package>
<package pkgid="01aa5afbf200ebcd720abc0dfd39074af1bc2608c52b28498be0b30e05dc7619" name="accel-config-debugsource" arch="i686">
  <version epoch="0" ver="4.1.8" rel="2.el9"/>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-1" date="1681819200">- Rebase to the 3.5.3 release.
Resolves: rhbz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-2" date="1681819201">- Remove spec file variable that blocked debuginfo build
Resolves: rhz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-1" date="1701432000">- Rebase to 4.1.3 release
- Update License tags to SPDX identifiers
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-2" date="1705492800">- Fix SPDX tags
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711108800">- Rebase to 4.1.6 release
Resolves: RHEL-29910</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1714564800">- Fix faulty logic in dsa_user_test_runner device clean up.
- Adds a couple of test clean ups as well.
Resolves: RHEL-32451</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1725624000">- Rebase to 4.1.8 release
Resolves: RHEL-56316</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-2" date="1742212800">- Update to current stable.
  Resolves: RHEL-38577</changelog>
</package>
<package pkgid="0ec329e2acb0c7fb98d3cf713c299c25d8594689a3a5eaeb86ed2d8557914354" name="accel-config-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="2.el9"/>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-1" date="1681819200">- Rebase to the 3.5.3 release.
Resolves: rhbz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-2" date="1681819201">- Remove spec file variable that blocked debuginfo build
Resolves: rhz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-1" date="1701432000">- Rebase to 4.1.3 release
- Update License tags to SPDX identifiers
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-2" date="1705492800">- Fix SPDX tags
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711108800">- Rebase to 4.1.6 release
Resolves: RHEL-29910</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1714564800">- Fix faulty logic in dsa_user_test_runner device clean up.
- Adds a couple of test clean ups as well.
Resolves: RHEL-32451</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1725624000">- Rebase to 4.1.8 release
Resolves: RHEL-56316</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-2" date="1742212800">- Update to current stable.
  Resolves: RHEL-38577</changelog>
</package>
<package pkgid="448d32567db8af851f8c2d75758e5a4733f8ac44dfdfe97c86868e7b264baeb4" name="accel-config-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.8" rel="2.el9"/>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-1" date="1681819200">- Rebase to the 3.5.3 release.
Resolves: rhbz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-2" date="1681819201">- Remove spec file variable that blocked debuginfo build
Resolves: rhz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-1" date="1701432000">- Rebase to 4.1.3 release
- Update License tags to SPDX identifiers
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-2" date="1705492800">- Fix SPDX tags
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711108800">- Rebase to 4.1.6 release
Resolves: RHEL-29910</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1714564800">- Fix faulty logic in dsa_user_test_runner device clean up.
- Adds a couple of test clean ups as well.
Resolves: RHEL-32451</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1725624000">- Rebase to 4.1.8 release
Resolves: RHEL-56316</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-2" date="1742212800">- Update to current stable.
  Resolves: RHEL-38577</changelog>
</package>
<package pkgid="da87b779b9e365fea746d2829f340862ef6aedde3b55f04ce0e1b7e14ec5ab33" name="accel-config-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="2.el9"/>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-1" date="1681819200">- Rebase to the 3.5.3 release.
Resolves: rhbz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 3.5.3-2" date="1681819201">- Remove spec file variable that blocked debuginfo build
Resolves: rhz#2153899</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-1" date="1701432000">- Rebase to 4.1.3 release
- Update License tags to SPDX identifiers
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.3-2" date="1705492800">- Fix SPDX tags
Resolves: RHEL-15610</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711108800">- Rebase to 4.1.6 release
Resolves: RHEL-29910</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1714564800">- Fix faulty logic in dsa_user_test_runner device clean up.
- Adds a couple of test clean ups as well.
Resolves: RHEL-32451</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1725624000">- Rebase to 4.1.8 release
Resolves: RHEL-56316</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-2" date="1742212800">- Update to current stable.
  Resolves: RHEL-38577</changelog>
</package>
<package pkgid="a7c0fe6ceb9f9ca21ed5f018005b2747321e48b8c5e230622c5e047018c63e59" name="acl-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.1" rel="4.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-4" date="1696593600">- preserve failed setfacl return code (RHEL-11833)</changelog>
</package>
<package pkgid="2e9ee03ad7d1fbde2c4c215b06e0e8836c912be4435a3cb91cc66c535230ac5b" name="acl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="4.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-4" date="1696593600">- preserve failed setfacl return code (RHEL-11833)</changelog>
</package>
<package pkgid="d9ee50a7d633700633f0b88da904780f00a8474cbbbcfed6c3e5dcc27924f795" name="acl-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="728d0ca6e4cf3d622c300f79e51ddf67fe1b6d4f64b10d0a71ce5b4d511eaac4" name="acl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="87725450885b3846997d26d6effc04f02ad8f4ac2a93fff24e81434218cf22a6" name="acl-debugsource" arch="i686">
  <version epoch="0" ver="2.3.1" rel="4.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-4" date="1696593600">- preserve failed setfacl return code (RHEL-11833)</changelog>
</package>
<package pkgid="315192ac6d5189ab68caef14d4f5ada510ac579946179b97512b5257bf90e04a" name="acl-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="4.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-4" date="1696593600">- preserve failed setfacl return code (RHEL-11833)</changelog>
</package>
<package pkgid="369ad76cfe6c049f3ac36e3d25d542b300d71809e79fa1868f18b7c863fc6f8a" name="acl-debugsource" arch="i686">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="440f0894429037f8612c1e0bceb6e2fb2d461311d81a5f02177a3c228de95711" name="acl-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="eb8f2bccd0e593d015886a4bad43212498ac721cd5b670a9f08d95cef72275d7" name="acpica-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="20210604" rel="5.el9"/>
  <changelog author="Al Stone &lt;ahs3@redhat.com&gt; - 20200925-1" date="1603108800">- Update to 20200925 source tree
- Completely revamp the old big-endian patches (maintainability was the goal).
  This results in a much larger patch set, but each patch is more clearly used
  for a specific purpose.
- The acpinames command has been deprecated upstream; acpiexec provides 
  replacement functionality.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200925-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200925-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Dean Nelson &lt;dnelson@redhat.com&gt; - 20210604-1" date="1627041600">- Update to 20210604 source tree.
- Bring the big-endian patches up-to-date with what has been submitted
  upstream by Al Stone &lt;ahs3@redhat.com&gt; (not accepted currently).</changelog>
  <changelog author="Al Stone &lt;ahs3@redhat.com&gt; - 20210604-2" date="1627387200">- Running 'iasl -T all' would segfault when dumping the PHAT template;
  fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
- Borrowed a patch from upstream to fix Unicode usage in WPBTs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20210604-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Dean Nelson &lt;dnelson@redhat.com&gt; - 20210604-4" date="1664798400">- Add in big-endian patches for PRMT, RGRT and SVKL tables.
- Fix big-endian related prmt.asl compiler errors.</changelog>
  <changelog author="Dean Nelson &lt;dnelson@redhat.com&gt; - 20210604-5" date="1665057600">- Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
- Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
- Backport 0914618b553d ("Automated cleanup; No functional changes").
- Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
- Add in big-endian patch for CEDT tble.</changelog>
</package>
<package pkgid="ea314646e53e7a699a6a65cfb1b79cc197acbd935eed4ce52ccf12dd6df14311" name="acpica-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="20210604" rel="5.el9"/>
  <changelog author="Al Stone &lt;ahs3@redhat.com&gt; - 20200925-1" date="1603108800">- Update to 20200925 source tree
- Completely revamp the old big-endian patches (maintainability was the goal).
  This results in a much larger patch set, but each patch is more clearly used
  for a specific purpose.
- The acpinames command has been deprecated upstream; acpiexec provides 
  replacement functionality.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200925-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200925-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Dean Nelson &lt;dnelson@redhat.com&gt; - 20210604-1" date="1627041600">- Update to 20210604 source tree.
- Bring the big-endian patches up-to-date with what has been submitted
  upstream by Al Stone &lt;ahs3@redhat.com&gt; (not accepted currently).</changelog>
  <changelog author="Al Stone &lt;ahs3@redhat.com&gt; - 20210604-2" date="1627387200">- Running 'iasl -T all' would segfault when dumping the PHAT template;
  fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
- Borrowed a patch from upstream to fix Unicode usage in WPBTs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20210604-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Dean Nelson &lt;dnelson@redhat.com&gt; - 20210604-4" date="1664798400">- Add in big-endian patches for PRMT, RGRT and SVKL tables.
- Fix big-endian related prmt.asl compiler errors.</changelog>
  <changelog author="Dean Nelson &lt;dnelson@redhat.com&gt; - 20210604-5" date="1665057600">- Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
- Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
- Backport 0914618b553d ("Automated cleanup; No functional changes").
- Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
- Add in big-endian patch for CEDT tble.</changelog>
</package>
<package pkgid="3fefe020ca0496487cd523e1d8c8b153e75c88e6f089bffd5b58eb1064aab331" name="adcli-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.3.1" rel="3.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765972800">- Rebase to latest upstream version
  Resolves: RHEL-134944
  Resolves: RHEL-134945
  Resolves: RHEL-134946
  Resolves: RHEL-134947
  Resolves: RHEL-134948
  Resolves: RHEL-134950
  Resolves: RHEL-134951
  Resolves: RHEL-134952</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1766491200">- Add explicit selinux dependencies to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-134944</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766491201">- Fix issue with restoring SELinux file label
  Resolves: RHEL-134944</changelog>
</package>
<package pkgid="e8917c8baa259b839bf84d54991789a23c383850781c95b3144c4736815ed963" name="adcli-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.3.1" rel="3.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765972800">- Rebase to latest upstream version
  Resolves: RHEL-134944
  Resolves: RHEL-134945
  Resolves: RHEL-134946
  Resolves: RHEL-134947
  Resolves: RHEL-134948
  Resolves: RHEL-134950
  Resolves: RHEL-134951
  Resolves: RHEL-134952</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1766491200">- Add explicit selinux dependencies to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-134944</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766491201">- Fix issue with restoring SELinux file label
  Resolves: RHEL-134944</changelog>
</package>
<package pkgid="4674d8dc36bda6dbf698fc3e946aaffd8cfa1af5099175290d4345e121779411" name="alternatives-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24" rel="2.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.21-1" date="1664971200">- ci: Add CodeQL to replace LGTM
- alternatives: replace master/slave with leader/follower
- chkconfig: use correct cmp function
- Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
- ci: Add Shell linter - Differential ShellCheck
- ci: Use more inclusive terminology in workflows
- ci: Update workflows, packit and dependabot
- Translated using Weblate (Friulian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Estonian)
- Translated using Weblate (Georgian)
- Translated using Weblate (Polish)
- Translated using Weblate (Korean)
- Translated using Weblate (Czech)
- Translations update from Fedora Weblate (#77)
- Translations update from Fedora Weblate (#75)
- Translations update from Fedora Weblate (#74)
- Translations update from Fedora Weblate (#73)
- Translated using Weblate (Ukrainian)
- Update translation files
- Family mentioned for --set in both man and help
- Translated using Weblate (French)
- build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
- Translated using Weblate (German)
- Add LGTM badges to README
- Merge remote-tracking branch 'weblate/master'
- Translated using Weblate (Indonesian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Turkish)
- Translated using Weblate (Polish)
- Translated using Weblate (Norwegian Nynorsk)
- Update translation files
- Translated using Weblate (Finnish)
- Translated using Weblate (Czech)
- Translated using Weblate (Swedish)
- Translated using Weblate (Italian)
- Translated using Weblate (Spanish)
- Translated using Weblate (Chinese (Simplified))</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.22-1" date="1679572800">- migrate to SPDX license
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Japanese)
- ci: Add locale linter
- ci: update workflows
- test: fix ShellCheck error[SC2070]
- Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
- releng: Packit remove extra job trigger
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.23-1" date="1683201600">- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- alternatives: --keep-foreign incorrectly handles non-existent files
- alternatives: isLink should return 0 in case of lstat error
- Translated using Weblate (Swedish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (German)
- doc: update translations
- spec: remote changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-1" date="1683201601">- ci: fix `NEXT_VERSION` in Makefile
- revert: releng: Enable Packit to handle Fedora updates
- revert: releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-2" date="1725451200">- ostree: move admindir to /etc/alternatives.admindir (RHEL-57665)</changelog>
</package>
<package pkgid="0e7dcc2571652ed7457591b3fd2784be5a85c7a4871459003f485db061e5e7a4" name="at-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.23" rel="13.el9_7"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.1.23-12" date="1751284800">- Add patch to fix past date handling
- Resolves: RHEL-97024</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.1.23-13" date="1758283200">- Use systemd-tmpfiles for /var/spool/at directories
- Resolves: RHEL-110319</changelog>
</package>
<package pkgid="47236e3446729542402ce4b9732fd16cfe8648324ef9430ab85bc37d66487f8f" name="at-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.23" rel="13.el9_7"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.1.23-12" date="1751284800">- Add patch to fix past date handling
- Resolves: RHEL-97024</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.1.23-13" date="1758283200">- Use systemd-tmpfiles for /var/spool/at directories
- Resolves: RHEL-110319</changelog>
</package>
<package pkgid="d862cf5f918442e16ab0e40eb48ff9dd2413f086583dbebbf72ba51eee3548c1" name="atlas-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.3" rel="17.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-10" date="1580126400">- Fix compatibility with gcc 10
- Sync compiler/linker flags with RHEL</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-11" date="1581595200">- Drop IBM z10 and z196 subpackages
- s390 is now optimized for z12
Related: #1780286</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3.13" date="1598529600">- Sync with rhel 8.3 + cleanup
- Add new subpackages - z{14,15}
- Unlike in rhel8, the base subpackage still needs to be build for z12.
- Covscan related bugfixes
- Spec and git cleanup (remove unused patches/sources)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-14" date="1613995200">- Fix the messed scriptlets
Resolves: #1929845</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-15" date="1613995201">- Remove unused scriptlets</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="56c546741fa75ba3b7e2d8739448a78f062e4c214608a65a32ee5373ae2fff9d" name="atlas-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.3" rel="17.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-10" date="1580126400">- Fix compatibility with gcc 10
- Sync compiler/linker flags with RHEL</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-11" date="1581595200">- Drop IBM z10 and z196 subpackages
- s390 is now optimized for z12
Related: #1780286</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3.13" date="1598529600">- Sync with rhel 8.3 + cleanup
- Add new subpackages - z{14,15}
- Unlike in rhel8, the base subpackage still needs to be build for z12.
- Covscan related bugfixes
- Spec and git cleanup (remove unused patches/sources)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-14" date="1613995200">- Fix the messed scriptlets
Resolves: #1929845</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-15" date="1613995201">- Remove unused scriptlets</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7f964d1efd0907046619bd7cda90c78663b9e589c2fed559ae4dadeb9bd9f689" name="atlas-debugsource" arch="i686">
  <version epoch="0" ver="3.10.3" rel="17.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-10" date="1580126400">- Fix compatibility with gcc 10
- Sync compiler/linker flags with RHEL</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-11" date="1581595200">- Drop IBM z10 and z196 subpackages
- s390 is now optimized for z12
Related: #1780286</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3.13" date="1598529600">- Sync with rhel 8.3 + cleanup
- Add new subpackages - z{14,15}
- Unlike in rhel8, the base subpackage still needs to be build for z12.
- Covscan related bugfixes
- Spec and git cleanup (remove unused patches/sources)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-14" date="1613995200">- Fix the messed scriptlets
Resolves: #1929845</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-15" date="1613995201">- Remove unused scriptlets</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3e6b29d62a0617606f797ad5e9067acd53695a37b01d2c09bf80dbebfb477994" name="atlas-debugsource" arch="x86_64">
  <version epoch="0" ver="3.10.3" rel="17.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-10" date="1580126400">- Fix compatibility with gcc 10
- Sync compiler/linker flags with RHEL</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-11" date="1581595200">- Drop IBM z10 and z196 subpackages
- s390 is now optimized for z12
Related: #1780286</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3.13" date="1598529600">- Sync with rhel 8.3 + cleanup
- Add new subpackages - z{14,15}
- Unlike in rhel8, the base subpackage still needs to be build for z12.
- Covscan related bugfixes
- Spec and git cleanup (remove unused patches/sources)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-14" date="1613995200">- Fix the messed scriptlets
Resolves: #1929845</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-15" date="1613995201">- Remove unused scriptlets</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a66d4c31ac95d83ef070f173e039737e34cdf98b7cf2cc8b4bc6a4a5cf0a94ed" name="attr-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.4.48-9" date="1592827200">- add BR for perl(FileHandle) needed by %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-10" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.0-1" date="1615550400">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.1-1" date="1615896000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3d3a1d7529f4633357acaae1e72f5f07acfe4af7bba4681a0cb4d7036ad0fba7" name="attr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.4.48-9" date="1592827200">- add BR for perl(FileHandle) needed by %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-10" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.0-1" date="1615550400">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.1-1" date="1615896000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5fb1a87531fbe7d5928ed7dc3c29cc4059138c86338311deb779723b3c5dbf70" name="attr-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)</changelog>
</package>
<package pkgid="0441126c2074df8e44db4b9d4dc37f2d3d670191a4b6b654b39ae90a9f3f362c" name="attr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)</changelog>
</package>
<package pkgid="c9779edb5d0f0ab03b1a3531c7591c934db5faf82b4eea38b59ebc78da7dff43" name="attr-debugsource" arch="i686">
  <version epoch="0" ver="2.5.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.4.48-9" date="1592827200">- add BR for perl(FileHandle) needed by %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-10" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.0-1" date="1615550400">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.1-1" date="1615896000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2172a657c2c405258e4f559e9ffcda745d0e70f342c950de917bce91def22b73" name="attr-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.4.48-9" date="1592827200">- add BR for perl(FileHandle) needed by %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-10" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.0-1" date="1615550400">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.1-1" date="1615896000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5187a08f1cc7a64416c797d73bfc2012d78d61af23bce3cace6e35938f249e80" name="attr-debugsource" arch="i686">
  <version epoch="0" ver="2.6.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)</changelog>
</package>
<package pkgid="404dfe6381a417de8df7aeb6c6c4ffd57f84520afc4e7676c8628933b0458b28" name="attr-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)</changelog>
</package>
<package pkgid="e2dabce28e313b7560bc6a9726dd445e8f51dd0800368f206b821b5c96ee801a" name="audispd-plugins-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="6befacaf9b2f6dce0390406a606e7054ee59840ea1933b55464522a00f277e3d" name="audispd-plugins-zos-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="b145ee81db93cf9e1d2739d92c5862162dae7338f3349711cdb70d50e8cc08e7" name="audit-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="e06e6cbae3a8ce88648c61e908809f4808d54adabe8987a3a3a690d3a91a67ce" name="audit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="5d2cb427bba2583070e8175e8f6a80e75f97eec073caf36cf806e47595988962" name="audit-debugsource" arch="i686">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="bcccfa0d54fdaa68ff2259aa0b3735bc2c349e89428e97c6af4f1eff1a5f41d0" name="audit-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="1ef568e56aa3c0a1001feb35e1be5b38742d279a23eb4b110be49b069047b921" name="audit-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="ad60de5e73fc8a05b157acf2088e9a61183f4bd6c2efeb42856e697c8cd1b892" name="audit-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="349161206b716a8aa6af52724840a3db2b6e47a8869e541647ee299deafa0415" name="authselect-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="e7a5416c6031448b564098570ad18abed46e1cb46a1ed2910c5118aebf90416e" name="authselect-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="966bac069747989cef9e18a73fa5ce1804dc36282706c11ec7d7c945d7f74659" name="authselect-debugsource" arch="i686">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="a214b493b8d06173cc68a88cb9f8f858831bd3168a2a207fda1532aea231334a" name="authselect-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="ac3e1844bb4991bfa8fd9233b922e63ba4bd8a9369c961853aa8856bc692875a" name="authselect-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="e21f55a0a0ae9fa98a4f4ec0952287000c86a9b7ae6081520cecfa64e417a704" name="authselect-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="a80bfdd273a882c08626e98b9bea95307ab14043032f679bfcb1b1eb47056dc4" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.1.7" rel="65.el9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-55" date="1690977600">- bz2223252 - filesystems mount and expire immediately
  - fix expire retry looping.
  - correct day in changelog entry for revision 53.
- Resolves: rhbz#2223252</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-56" date="1698321600">- RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
  - allow -null map in indirect maps.
- Resolves: RHEL-13083</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-57" date="1698667200">- RHEL-13084 - multi mount detection fails for share with blank+dash causing
  SEGV crash
  - fix multi-mount check.
- Resolves: RHEL-13084</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-58" date="1703246400">- RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
  autofs-5.1.4-109
  - fix get parent multi-mount check in try_remount().
  - fix deadlock in remount.
- Resolves: RHEL-19731</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-59" date="1734350400">- RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
- Resolves: RHEL-69485
- RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.
  - fix lookup search type in umount_subtree_mounts().
  - fix remount_active_mount() not remounting symlinks.
  - log when setting amd per-mount timeout.
  - update per-mount expire timeout on readmap.
  - clear per-mount timeout if not set.
- Resolves: RHEL-71359
- RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
  - fix submount shutdown race.
- Resolves: RHEL-57466</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-60" date="1738843200">- RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
  - fix deadlock in master_notify_submount().
- Resolves: RHEL-77321</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-61" date="1741953600">- RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
  incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
  - handle sss special case getautomntbyname() error
- Resolves: RHEL-32684</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-63" date="1744804800">- RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
  - fix lock ordering deadlock in expire_cleanup().
  - change spec file %patchN to %patch -P N as required by rpm(8).
  - Fix compile error caused by function pointer types in cyrus-sasl module.
  - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
- Resolves: RHEL-87031</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-64" date="1746619200">- RHEL-81885 - autofs: segfault while dereferencing null mapent
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
  - fix changelog revision number of previous change.
- Resolves: RHEL-81885</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65" date="1747137600">- RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
  - always recreate credential cache.
  - fix always recreate credential cache.
-Resolves: RHEL-85615</changelog>
</package>
<package pkgid="b7fa821c7cf4690d77249b0842a1026a6e34e693b809b551f724a9d34250c2c5" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.1.7" rel="65.el9_8.3"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-59" date="1734350400">- RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
- Resolves: RHEL-69485
- RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.
  - fix lookup search type in umount_subtree_mounts().
  - fix remount_active_mount() not remounting symlinks.
  - log when setting amd per-mount timeout.
  - update per-mount expire timeout on readmap.
  - clear per-mount timeout if not set.
- Resolves: RHEL-71359
- RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
  - fix submount shutdown race.
- Resolves: RHEL-57466</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-60" date="1738843200">- RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
  - fix deadlock in master_notify_submount().
- Resolves: RHEL-77321</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-61" date="1741953600">- RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
  incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
  - handle sss special case getautomntbyname() error
- Resolves: RHEL-32684</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-63" date="1744804800">- RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
  - fix lock ordering deadlock in expire_cleanup().
  - change spec file %patchN to %patch -P N as required by rpm(8).
  - Fix compile error caused by function pointer types in cyrus-sasl module.
  - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
- Resolves: RHEL-87031</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-64" date="1746619200">- RHEL-81885 - autofs: segfault while dereferencing null mapent
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
  - fix changelog revision number of previous change.
- Resolves: RHEL-81885</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65" date="1747137600">- RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
  - always recreate credential cache.
  - fix always recreate credential cache.
-Resolves: RHEL-85615</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.1" date="1773835200">- RHEL-154192 - Wrong oz_pgrp in autofs_sb_info causes automount to wait
  on automount.
  - quiet possibly noisy log message.
  - fix devid update on reload.
  - fix cache writelock must be taken in update_map_cache().
  - fix skip valid map entries on expire cleanup.
  - remove unnecessary call to set_direct_mount_tree_catatonic().
  - remove unnecessary assignment in umount_multi().
  - fix direct mount trigger umount failure case.
  - refactor do_umount_autofs_direct().
  - fix stale direct mount trigger not umounted on expire.
  - add function table_lookup_ino().
  - improve handling of missing map entry for mount request.
- Resolves: RHEL-154192</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.2" date="1774267200">- RHEL-158216 - get_proximity returns a worng proximity on specific
  addresses [rhel-9.8.z]
  - Fix masks in parse_sub.c, so that hosts are correctly matched.
- Resolves: RHEL-158216</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:5.1.7-65.el9_8.3" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
</package>
<package pkgid="95975cb9c314d87419bd2f5a3b28b1dc8a2299b300a65acf8acf6a3d8a8452f6" name="autofs-debugsource" arch="x86_64">
  <version epoch="1" ver="5.1.7" rel="65.el9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-55" date="1690977600">- bz2223252 - filesystems mount and expire immediately
  - fix expire retry looping.
  - correct day in changelog entry for revision 53.
- Resolves: rhbz#2223252</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-56" date="1698321600">- RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
  - allow -null map in indirect maps.
- Resolves: RHEL-13083</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-57" date="1698667200">- RHEL-13084 - multi mount detection fails for share with blank+dash causing
  SEGV crash
  - fix multi-mount check.
- Resolves: RHEL-13084</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-58" date="1703246400">- RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
  autofs-5.1.4-109
  - fix get parent multi-mount check in try_remount().
  - fix deadlock in remount.
- Resolves: RHEL-19731</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-59" date="1734350400">- RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
- Resolves: RHEL-69485
- RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.
  - fix lookup search type in umount_subtree_mounts().
  - fix remount_active_mount() not remounting symlinks.
  - log when setting amd per-mount timeout.
  - update per-mount expire timeout on readmap.
  - clear per-mount timeout if not set.
- Resolves: RHEL-71359
- RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
  - fix submount shutdown race.
- Resolves: RHEL-57466</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-60" date="1738843200">- RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
  - fix deadlock in master_notify_submount().
- Resolves: RHEL-77321</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-61" date="1741953600">- RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
  incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
  - handle sss special case getautomntbyname() error
- Resolves: RHEL-32684</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-63" date="1744804800">- RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
  - fix lock ordering deadlock in expire_cleanup().
  - change spec file %patchN to %patch -P N as required by rpm(8).
  - Fix compile error caused by function pointer types in cyrus-sasl module.
  - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
- Resolves: RHEL-87031</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-64" date="1746619200">- RHEL-81885 - autofs: segfault while dereferencing null mapent
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
  - fix changelog revision number of previous change.
- Resolves: RHEL-81885</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65" date="1747137600">- RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
  - always recreate credential cache.
  - fix always recreate credential cache.
-Resolves: RHEL-85615</changelog>
</package>
<package pkgid="4bea3afb573e758ca632d674a2cd2844272b54b793629277059a0206924d6f49" name="autofs-debugsource" arch="x86_64">
  <version epoch="1" ver="5.1.7" rel="65.el9_8.3"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-59" date="1734350400">- RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
- Resolves: RHEL-69485
- RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.
  - fix lookup search type in umount_subtree_mounts().
  - fix remount_active_mount() not remounting symlinks.
  - log when setting amd per-mount timeout.
  - update per-mount expire timeout on readmap.
  - clear per-mount timeout if not set.
- Resolves: RHEL-71359
- RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
  - fix submount shutdown race.
- Resolves: RHEL-57466</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-60" date="1738843200">- RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
  - fix deadlock in master_notify_submount().
- Resolves: RHEL-77321</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-61" date="1741953600">- RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
  incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
  - handle sss special case getautomntbyname() error
- Resolves: RHEL-32684</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-63" date="1744804800">- RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
  - fix lock ordering deadlock in expire_cleanup().
  - change spec file %patchN to %patch -P N as required by rpm(8).
  - Fix compile error caused by function pointer types in cyrus-sasl module.
  - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
- Resolves: RHEL-87031</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-64" date="1746619200">- RHEL-81885 - autofs: segfault while dereferencing null mapent
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
  - fix changelog revision number of previous change.
- Resolves: RHEL-81885</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65" date="1747137600">- RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
  - always recreate credential cache.
  - fix always recreate credential cache.
-Resolves: RHEL-85615</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.1" date="1773835200">- RHEL-154192 - Wrong oz_pgrp in autofs_sb_info causes automount to wait
  on automount.
  - quiet possibly noisy log message.
  - fix devid update on reload.
  - fix cache writelock must be taken in update_map_cache().
  - fix skip valid map entries on expire cleanup.
  - remove unnecessary call to set_direct_mount_tree_catatonic().
  - remove unnecessary assignment in umount_multi().
  - fix direct mount trigger umount failure case.
  - refactor do_umount_autofs_direct().
  - fix stale direct mount trigger not umounted on expire.
  - add function table_lookup_ino().
  - improve handling of missing map entry for mount request.
- Resolves: RHEL-154192</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.2" date="1774267200">- RHEL-158216 - get_proximity returns a worng proximity on specific
  addresses [rhel-9.8.z]
  - Fix masks in parse_sub.c, so that hosts are correctly matched.
- Resolves: RHEL-158216</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:5.1.7-65.el9_8.3" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
</package>
<package pkgid="6c1c4edd1f30a9fbf824b700ae26de56a83ca2793f864a95d53a32627a3518a2" name="avahi-debuginfo" arch="i686">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="2b23e881ff6f613b64acd18e7a9c80885074b3aeaa35e82707a624d07e729944" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="3c563ea1571c397a89c67db531d2951921eba50956f96006dc3060c456dcb06f" name="avahi-debugsource" arch="i686">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="206463b5b575d93d1e69a44136d4a4a55e70e97f74f244f3ac7a0c05e67e5dfc" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="fbbd1ab52f5269eab0dcf50df6deb0ad32c182ab9b54534748849899cf0cb886" name="avahi-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="dc7ad7ef67d994583028789050c64ed6f310c595ff7d4062ccfd6cde88a7e227" name="avahi-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="cc77576241fc360296dc174d3080822b38522a13f058d71d0a2bf8d4e60f322f" name="bash-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.8" rel="9.el9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-5" date="1659960000">- Fix an off by one error while calling mbrtowc()
  Resolves: #2115206</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-6" date="1669118400">- Add a null check in parameter_brace_transform() function
  Resolves: CVE-2022-3715</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-7" date="1706097600">- Restore audit logs in bash-4.3 or newer versions
  Resolves: RHEL-22619</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-8" date="1707739200">- Fix an issue with adding newline in bracketed paste mode
  Resolves: #2168963</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-9" date="1707825600">- Fix a performance regression while using large number of environment variables
  Resolves: RHEL-20020</changelog>
</package>
<package pkgid="0fbf04249e1586f42df3d200187daca9d17a5c56785b0321d79652fa8e769257" name="bash-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.8" rel="9.el9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-5" date="1659960000">- Fix an off by one error while calling mbrtowc()
  Resolves: #2115206</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-6" date="1669118400">- Add a null check in parameter_brace_transform() function
  Resolves: CVE-2022-3715</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-7" date="1706097600">- Restore audit logs in bash-4.3 or newer versions
  Resolves: RHEL-22619</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-8" date="1707739200">- Fix an issue with adding newline in bracketed paste mode
  Resolves: #2168963</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-9" date="1707825600">- Fix a performance regression while using large number of environment variables
  Resolves: RHEL-20020</changelog>
</package>
<package pkgid="a77fd02fadc4aac3cb03ef5a5d702a1d790be9441d038763fec81567e5c9e59b" name="bc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="14.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.07.1-13" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.07.1-14" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e7012f3e61fd6d288f6a3ef8129558ecd31c1361c9e16ceda59cdee1ffd079ea" name="bc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="14.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.07.1-13" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.07.1-14" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="43aeec2184c1db76a944388ce082501bd03885be7fe210890135370bd425c34d" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="e955c0352ec6a4e4ce81fa7408327883700b8d68fa9e0cf1198062f039335c01" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="4418ab8d66569f0be9b31172d6c95e1d6a75036e4dd32a3c9b11d19c661eab7e" name="binutils-debugsource" arch="i686">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="c4207b7b749f099369148ccfc98501acb1ce02afeb693fd6e7f513efd059d51c" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="bfc4f8aef5b33dad1ac63f8de307a670b272eb23141adac7d5805e932cb63324" name="binutils-gold-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="0e86887643eda8b3d48ea0276c87f0c72fac6885d070086d808f6c8b77d37319" name="biosdevname-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="10.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.7.3-10" date="1715860800">- Make sure biosdevname works on systems with enabled SecureBoot (RHEL-18300)</changelog>
</package>
<package pkgid="d925459f68da67ee19529ce42d031f09cdcc5879b62989838487734b2e8ded18" name="biosdevname-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="10.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.7.3-10" date="1715860800">- Make sure biosdevname works on systems with enabled SecureBoot (RHEL-18300)</changelog>
</package>
<package pkgid="abfb32d6594c704ba8aa8c54f58b9b3d3d31788f1c3a4f1a45f87795500d58cf" name="bluez-debuginfo" arch="i686">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="4506273314567f3f70c40c0410f677643e607ae28d8e06b39f93b3df36f96ea1" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="75b05c7b4372fb626005f2e2a6c2c08b2ad275ccb3e5ea6c11f37b4e68034c48" name="bluez-debuginfo" arch="i686">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-155508</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1782734400">- Fix BLE advertisments
  Resolves: RHEL-186503</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193097</changelog>
</package>
<package pkgid="52ccf6aa548d99216ce837acc9a1b2dad461d9bf8581d4459e7d0bc5a6560734" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-155508</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1782734400">- Fix BLE advertisments
  Resolves: RHEL-186503</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193097</changelog>
</package>
<package pkgid="b0e45a8f107f3daff6f6ce46eab98f3f9120585d04af1251c7d6d39ef3dda51f" name="bluez-debugsource" arch="i686">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="024395fcf753ccd0ac6ad83596b28ce1521f90cad015e525198289843e0f3133" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="f5aafb090ab480a159f57d81bfeac638faa177ec68c8f7e89bcfcf9007b80210" name="bluez-debugsource" arch="i686">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-155508</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1782734400">- Fix BLE advertisments
  Resolves: RHEL-186503</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193097</changelog>
</package>
<package pkgid="6a14450d360b9eabc8b6adcf5d835c09a0f886e72f2f06ca9e1c44629fcd8e81" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-155508</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1782734400">- Fix BLE advertisments
  Resolves: RHEL-186503</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193097</changelog>
</package>
<package pkgid="5d63350bb51bbb843e947f75ba61cb36fb390389750783585e4fb2e9f36ebd15" name="bluez-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="1d574485ca4ca33315bcb0c35d244911992ebb92c26cf19ca6515f1f870440a0" name="bluez-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="0fe2f8675214182dbc55c96a5b5eeadd680e25f588c112914d9115dc30f5dfda" name="bluez-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-155508</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1782734400">- Fix BLE advertisments
  Resolves: RHEL-186503</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193097</changelog>
</package>
<package pkgid="66f348a1063b6748b4b95c3c76d94a9ce0efd44e8d3f0638b91d017fa53bf48b" name="bluez-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-155508</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1782734400">- Fix BLE advertisments
  Resolves: RHEL-186503</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193097</changelog>
</package>
<package pkgid="f613356c2827ee0432e55e9cab95f79848c26c5b173433f1e1f17443af75a909" name="bolt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="1.el9"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.7-1" date="1711454400">- Update to upstream release 0.9.7
- Support 'nopcie' security level</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.10-1" date="1761307200">- Update to the upstream version 0.9.10
- Update to 0.9.10
- Fix bolt exits when opening an empty version file
- Fix a NULL syspath variable causes SIGSEGV</changelog>
</package>
<package pkgid="aa56693158148a703940a50f335b25e6ec229e46e20840375280b6245f9f6b3e" name="bolt-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="1.el9"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.7-1" date="1711454400">- Update to upstream release 0.9.7
- Support 'nopcie' security level</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.10-1" date="1761307200">- Update to the upstream version 0.9.10
- Update to 0.9.10
- Fix bolt exits when opening an empty version file
- Fix a NULL syspath variable causes SIGSEGV</changelog>
</package>
<package pkgid="9705b864f612474c469b0fdc6bfa24923983b8324db519be1e0c0fa347a02e05" name="brotli-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="9.el9_7"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-8" date="1768737600">- Resolves: RHEL-133995
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-9" date="1768910400">- Resolves: RHEL-133995
  Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="eb49fba5456794561f06453e2296a69e57e257441f4c5bc147978346f397015c" name="brotli-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="9.el9_7"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-8" date="1768737600">- Resolves: RHEL-133995
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-9" date="1768910400">- Resolves: RHEL-133995
  Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="c20eeaf574d188a9664e2aaba6ff4a70f718cd439a53d93f400ce9f152c3f455" name="brotli-debugsource" arch="i686">
  <version epoch="0" ver="1.0.9" rel="9.el9_7"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-8" date="1768737600">- Resolves: RHEL-133995
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-9" date="1768910400">- Resolves: RHEL-133995
  Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="e4d6f28c1a543d8178e85301de0461d254ad3df4c7b25bcb85b8afc8c714d52e" name="brotli-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="9.el9_7"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-8" date="1768737600">- Resolves: RHEL-133995
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-9" date="1768910400">- Resolves: RHEL-133995
  Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="9fa812e8720dc16a2e3892416a5664b8e949198c9e2de14ad66578d5f79ede54" name="bubblewrap-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.3" rel="1.el9"/>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 0.4.1-7" date="1710504000">- Backport https://github.com/containers/bubblewrap/commit/4c35d7a5f92499d6ed646d4a5ffad9acc10cb432</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.4.1-8" date="1725019200">- Backport upstream fix to help address CVE-2024-42472 in flatpak</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@redhat.com&gt; - 0.6.3-1" date="1725019201">- Rebase to 0.6.3 which is supported upstream
  This release also includes the fix for CVE-2024-42472
  Fixes: #RHEL-56797</changelog>
</package>
<package pkgid="5e549bba3b72ea706b3234e0eed570a12b18da953dd7e45581cf96747fe30bd9" name="bubblewrap-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.3" rel="1.el9"/>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 0.4.1-7" date="1710504000">- Backport https://github.com/containers/bubblewrap/commit/4c35d7a5f92499d6ed646d4a5ffad9acc10cb432</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.4.1-8" date="1725019200">- Backport upstream fix to help address CVE-2024-42472 in flatpak</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@redhat.com&gt; - 0.6.3-1" date="1725019201">- Rebase to 0.6.3 which is supported upstream
  This release also includes the fix for CVE-2024-42472
  Fixes: #RHEL-56797</changelog>
</package>
<package pkgid="3453553e228adf732df677c6afcab0399cd6fbae6805eb6404c28ba36e0ddd9f" name="bzip2-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="f71ae831a5961482f64da00ebb91860debe5a0df9c0e7e0398388ab5602e0485" name="bzip2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="f834ff2e1343c9457583c5be38043759430dd4d600576093d11c8231dd1e1047" name="bzip2-debugsource" arch="i686">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="112e1b59df361e47d556c4293a3ccb697bb3b3fc4a2bb71b611079b7e0e89891" name="bzip2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="d5a22cf5e7cc768498974d6c6357fb984780e2ae697471114ed8d04ec062cae2" name="bzip2-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="ef699a62b6c858e56e249f3848202591a206ddeba509840da1336eddf733e4cc" name="bzip2-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="45ca15173876c40ad76241a0d818241fe5776e6a2681c11c5e07c4acde730138" name="c-ares-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.1" rel="2.el9_4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.17.1-6" date="1683892800">- Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-1" date="1685102400">- Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
- Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
- Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
- Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
- Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-2" date="1710158400">- Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9]</changelog>
</package>
<package pkgid="f9f56e65a94dd8015006cbbb73a998dc48c33173f607906ad8a33b39c629ab96" name="c-ares-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="2.el9_4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.17.1-6" date="1683892800">- Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-1" date="1685102400">- Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
- Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
- Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
- Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
- Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-2" date="1710158400">- Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9]</changelog>
</package>
<package pkgid="ac9d4ffc8f2a22c7f25704356463ca536f1cb577ab229f21d4a76a8af6f9e2ac" name="c-ares-debugsource" arch="i686">
  <version epoch="0" ver="1.19.1" rel="2.el9_4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.17.1-6" date="1683892800">- Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-1" date="1685102400">- Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
- Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
- Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
- Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
- Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-2" date="1710158400">- Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9]</changelog>
</package>
<package pkgid="5d3242407c258a3e2194c21186bd4566087414d59f621e538ebdba8bacc9cf54" name="c-ares-debugsource" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="2.el9_4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.17.1-6" date="1683892800">- Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-1" date="1685102400">- Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
- Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
- Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
- Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
- Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.19.1-2" date="1710158400">- Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9]</changelog>
</package>
<package pkgid="e61781fc58184a383da591445332254e046ffea8f48586383e47e3ca0c03618f" name="cachefilesd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.10.10" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.10-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.10-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e60f1f5e2b49501cd2721a4d7180574c01e9166afd09e3598b6dd927be357011" name="cachefilesd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.10.10" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.10-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.10-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e74f31de23956fa5a98ed95019837691abfade38ee0f968efdb768a12bde33cb" name="chkconfig-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24" rel="2.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.21-1" date="1664971200">- ci: Add CodeQL to replace LGTM
- alternatives: replace master/slave with leader/follower
- chkconfig: use correct cmp function
- Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
- ci: Add Shell linter - Differential ShellCheck
- ci: Use more inclusive terminology in workflows
- ci: Update workflows, packit and dependabot
- Translated using Weblate (Friulian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Estonian)
- Translated using Weblate (Georgian)
- Translated using Weblate (Polish)
- Translated using Weblate (Korean)
- Translated using Weblate (Czech)
- Translations update from Fedora Weblate (#77)
- Translations update from Fedora Weblate (#75)
- Translations update from Fedora Weblate (#74)
- Translations update from Fedora Weblate (#73)
- Translated using Weblate (Ukrainian)
- Update translation files
- Family mentioned for --set in both man and help
- Translated using Weblate (French)
- build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
- Translated using Weblate (German)
- Add LGTM badges to README
- Merge remote-tracking branch 'weblate/master'
- Translated using Weblate (Indonesian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Turkish)
- Translated using Weblate (Polish)
- Translated using Weblate (Norwegian Nynorsk)
- Update translation files
- Translated using Weblate (Finnish)
- Translated using Weblate (Czech)
- Translated using Weblate (Swedish)
- Translated using Weblate (Italian)
- Translated using Weblate (Spanish)
- Translated using Weblate (Chinese (Simplified))</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.22-1" date="1679572800">- migrate to SPDX license
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Japanese)
- ci: Add locale linter
- ci: update workflows
- test: fix ShellCheck error[SC2070]
- Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
- releng: Packit remove extra job trigger
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.23-1" date="1683201600">- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- alternatives: --keep-foreign incorrectly handles non-existent files
- alternatives: isLink should return 0 in case of lstat error
- Translated using Weblate (Swedish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (German)
- doc: update translations
- spec: remote changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-1" date="1683201601">- ci: fix `NEXT_VERSION` in Makefile
- revert: releng: Enable Packit to handle Fedora updates
- revert: releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-2" date="1725451200">- ostree: move admindir to /etc/alternatives.admindir (RHEL-57665)</changelog>
</package>
<package pkgid="d7a2f12c612719b63b1201aeabad6c87980f34f69000a1c0dd83ae9177a515be" name="chkconfig-debugsource" arch="x86_64">
  <version epoch="0" ver="1.24" rel="2.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.21-1" date="1664971200">- ci: Add CodeQL to replace LGTM
- alternatives: replace master/slave with leader/follower
- chkconfig: use correct cmp function
- Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
- ci: Add Shell linter - Differential ShellCheck
- ci: Use more inclusive terminology in workflows
- ci: Update workflows, packit and dependabot
- Translated using Weblate (Friulian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Estonian)
- Translated using Weblate (Georgian)
- Translated using Weblate (Polish)
- Translated using Weblate (Korean)
- Translated using Weblate (Czech)
- Translations update from Fedora Weblate (#77)
- Translations update from Fedora Weblate (#75)
- Translations update from Fedora Weblate (#74)
- Translations update from Fedora Weblate (#73)
- Translated using Weblate (Ukrainian)
- Update translation files
- Family mentioned for --set in both man and help
- Translated using Weblate (French)
- build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
- Translated using Weblate (German)
- Add LGTM badges to README
- Merge remote-tracking branch 'weblate/master'
- Translated using Weblate (Indonesian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Turkish)
- Translated using Weblate (Polish)
- Translated using Weblate (Norwegian Nynorsk)
- Update translation files
- Translated using Weblate (Finnish)
- Translated using Weblate (Czech)
- Translated using Weblate (Swedish)
- Translated using Weblate (Italian)
- Translated using Weblate (Spanish)
- Translated using Weblate (Chinese (Simplified))</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.22-1" date="1679572800">- migrate to SPDX license
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Japanese)
- ci: Add locale linter
- ci: update workflows
- test: fix ShellCheck error[SC2070]
- Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
- releng: Packit remove extra job trigger
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.23-1" date="1683201600">- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- alternatives: --keep-foreign incorrectly handles non-existent files
- alternatives: isLink should return 0 in case of lstat error
- Translated using Weblate (Swedish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (German)
- doc: update translations
- spec: remote changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-1" date="1683201601">- ci: fix `NEXT_VERSION` in Makefile
- revert: releng: Enable Packit to handle Fedora updates
- revert: releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-2" date="1725451200">- ostree: move admindir to /etc/alternatives.admindir (RHEL-57665)</changelog>
</package>
<package pkgid="4fd7a9f6ce2c1800452cfaf01bb33e607c8c9fc79a012ba2efaacf409d8b0b65" name="chrony-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8" rel="1.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-1" date="1704801600">- update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
  RHEL-12411)
- add chronyd-restricted service (RHEL-9972)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-2" date="1718280000">- fix crash on reload command during start (RHEL-28945)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-3" date="1723118400">- don't repeat error log messages when reloading sourcedir (RHEL-51786)
- add support for leap-seconds.list file (RHEL-53484)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6-1" date="1725537600">- update to 4.6 (RHEL-56964)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6.1-1" date="1730894400">- update to 4.6.1 (RHEL-61877)
- keep PHC refclock reachable when dropping samples due to high delay
  (RHEL-65421)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6.1-2" date="1749038400">- improve description of refresh directive (RHEL-82096)
- improve logging of selection failures (RHEL-80388 RHEL-80413 RHEL-80415)
- fix sourcedir reloading to not multiply sources (RHEL-95016)
- switch from patchX to patch -P X</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.8-1" date="1757592000">- update to 4.8 (RHEL-112598 RHEL-107036)</changelog>
</package>
<package pkgid="2bf1333848f714ba1ce8585f18e1160c4eb58e8dc145c32a5d1e9960421e60d4" name="chrony-debugsource" arch="x86_64">
  <version epoch="0" ver="4.8" rel="1.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-1" date="1704801600">- update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
  RHEL-12411)
- add chronyd-restricted service (RHEL-9972)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-2" date="1718280000">- fix crash on reload command during start (RHEL-28945)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-3" date="1723118400">- don't repeat error log messages when reloading sourcedir (RHEL-51786)
- add support for leap-seconds.list file (RHEL-53484)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6-1" date="1725537600">- update to 4.6 (RHEL-56964)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6.1-1" date="1730894400">- update to 4.6.1 (RHEL-61877)
- keep PHC refclock reachable when dropping samples due to high delay
  (RHEL-65421)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6.1-2" date="1749038400">- improve description of refresh directive (RHEL-82096)
- improve logging of selection failures (RHEL-80388 RHEL-80413 RHEL-80415)
- fix sourcedir reloading to not multiply sources (RHEL-95016)
- switch from patchX to patch -P X</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.8-1" date="1757592000">- update to 4.8 (RHEL-112598 RHEL-107036)</changelog>
</package>
<package pkgid="b578c047c2696ea82818c658cb33130842ff495ebde7e1ca8d07ee22fae47749" name="chrpath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-12" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-13" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.16-14" date="1607947200">- Use autosetup and enable testsuite</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b84b2f5dcbeead81f81c7da7400ca99092719d28acb8f6cd8382f840ac5fa1be" name="chrpath-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-12" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-13" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.16-14" date="1607947200">- Use autosetup and enable testsuite</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a3ce8546297356c6b7bb0251183b5252f92673f79739af6d851926e482409398" name="cifs-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5" rel="1.el9"/>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-2" date="1712923200">- cifs.upcall: fix UAF in get_cachename_from_process_env()
- Resolves: RHEL-28047</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-3" date="1712923201">- pam_cifscreds: fix NULL arg warning passed to pam_syslog()
- Resolves: RHEL-28050</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-4" date="1713268800">- mount.cifs.rst: add missing reference for sssd
- mount.cifs.rst: update section about xattr/acl support
- Resolves: RHEL-22495</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-5" date="1713787200">- Implement CLDAP Ping to find the closest site
- Resolves: RHELPLAN-17597</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
</package>
<package pkgid="9d828f593376c21f76184013e24552c74aaba73d5850aa534bd4f93328e8d3a6" name="cifs-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="0a04f795f323e797da39c64019305ddec1d63cb6479c8828bcb3d2923983eb4a" name="cifs-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="7.5" rel="1.el9"/>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-2" date="1712923200">- cifs.upcall: fix UAF in get_cachename_from_process_env()
- Resolves: RHEL-28047</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-3" date="1712923201">- pam_cifscreds: fix NULL arg warning passed to pam_syslog()
- Resolves: RHEL-28050</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-4" date="1713268800">- mount.cifs.rst: add missing reference for sssd
- mount.cifs.rst: update section about xattr/acl support
- Resolves: RHEL-22495</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-5" date="1713787200">- Implement CLDAP Ping to find the closest site
- Resolves: RHELPLAN-17597</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
</package>
<package pkgid="416c55ac873caee69a77910cf29fbdd913e83aa744baed99fa7a9d50743517a0" name="cifs-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="2f76cc85db8d95227271c5272bff381b469102ebb68478bf3f0cc499d89aaa68" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="356" rel="1.el9.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771588800">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="4a8413284ba3c9b667ff23cb13ed4f7ff23deb97197243f6d6d64f4fcd0e9c43" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="356.2" rel="1.el9_8.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
- node: update lodash dependency (RHEL-164196)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="786b10ce810bf6881f46a66b452e47dc921dd510c64295e3f2f809ac8f33cbbe" name="cockpit-debugsource" arch="x86_64">
  <version epoch="0" ver="356" rel="1.el9.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771588800">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="bc98caa05709fd4a043d77e9809cb06c09229a226a4057d7dab814922789e54c" name="cockpit-debugsource" arch="x86_64">
  <version epoch="0" ver="356.2" rel="1.el9_8.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
- node: update lodash dependency (RHEL-164196)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="154d9a5baadcab6a1c760762d96d04f33e7c59c843f63741318c3ebfbe05c7d0" name="coreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="40.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-35" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
</package>
<package pkgid="a228b39f0c2e5c7196360080f6306bc29050932f3cf3230c7d16af1053b6d1f4" name="coreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="41.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780315200">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)</changelog>
</package>
<package pkgid="164facee66c93e9dc007fe5877d15bc99b88e33268673c3eeb72a864b313e353" name="coreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="8.32" rel="40.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-35" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
</package>
<package pkgid="f588965cf61d68b6ff27cfa0c9b300df4d997ad87a09f71c131e6cec9d0c9c11" name="coreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="8.32" rel="41.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780315200">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)</changelog>
</package>
<package pkgid="dca38be8d38b24891787acec5f24e2ac4fb5a9f44b73103b1399c698e0606532" name="coreutils-single-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="40.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-35" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
</package>
<package pkgid="910d6c3782e01ed797f89ce0a0d2de1e0b6effd05db98834b01ca534d1e1767b" name="coreutils-single-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="41.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780315200">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)</changelog>
</package>
<package pkgid="b7cbf022424c06eb7a665e35e6e4ec63592da01849246c7a01ced625b9e5fad9" name="cpio-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13" rel="16.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 2.13-7" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-10" date="1613649600">- Properly drop priviledges for remote command</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-13" date="1629115200">- Fixed CVE-2021-38185 (#1992512)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-14" date="1629115201">- Minor fix for CVE-2021-38185 (#1992512)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-15" date="1629374400">- Revert patch for CVE-2021-38185 (#1992512)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-16" date="1629979200">- Fixed CVE-2021-38185 (#1992512)</changelog>
</package>
<package pkgid="4a1ecee75c8b94168b58078aa1d4b844baf89aa064d63ea83e260160a9f0e443" name="cpio-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13" rel="16.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 2.13-7" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-10" date="1613649600">- Properly drop priviledges for remote command</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-13" date="1629115200">- Fixed CVE-2021-38185 (#1992512)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-14" date="1629115201">- Minor fix for CVE-2021-38185 (#1992512)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-15" date="1629374400">- Revert patch for CVE-2021-38185 (#1992512)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 2.13-16" date="1629979200">- Fixed CVE-2021-38185 (#1992512)</changelog>
</package>
<package pkgid="f53efd2803ffd341b20950187e50d33818ddb1609b78e71d9f54de758f50cc67" name="cracklib-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.6" rel="28.el9"/>
  <changelog author="Ganna Starovoytova &lt;gstarovo@redhat.com&gt; 2.9.6-28" date="1768478400">- update URL (RHEL-5215)</changelog>
</package>
<package pkgid="a4ae3b160ab0d9707c6bfdf3f04e8c2006032f3c9147ab667e70284493fb8d4c" name="cracklib-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.6" rel="28.el9"/>
  <changelog author="Ganna Starovoytova &lt;gstarovo@redhat.com&gt; 2.9.6-28" date="1768478400">- update URL (RHEL-5215)</changelog>
</package>
<package pkgid="248849261330a435d3ab1286149a4e48e18c0257e0753d2454e2916476510fa8" name="cracklib-debugsource" arch="i686">
  <version epoch="0" ver="2.9.6" rel="28.el9"/>
  <changelog author="Ganna Starovoytova &lt;gstarovo@redhat.com&gt; 2.9.6-28" date="1768478400">- update URL (RHEL-5215)</changelog>
</package>
<package pkgid="241a6008f3fc0ad17d7d3e7b67e839b5962112fe092d4979977b3db987e99870" name="cracklib-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.6" rel="28.el9"/>
  <changelog author="Ganna Starovoytova &lt;gstarovo@redhat.com&gt; 2.9.6-28" date="1768478400">- update URL (RHEL-5215)</changelog>
</package>
<package pkgid="a1d27e1ba52cc280738dabc808c898356a4fca687353a65530b0325a76015568" name="cronie-anacron-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="16.el9"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60279</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-13" date="1733918400">- Create anacron timestamp files with correct permissions
- Resolves: RHEL-5376</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-14" date="1744372800">- Rename variables in get_range()
- Step size out fo bound handling 
- Fix range parsing
- Resolves: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-15" date="1747224000">- Move parsing code before separator check
- Related: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-16" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification
- Also use systemd_tmpfiles to create files in /var, to ensure Cronie
- works properly in Image mode
- Resolves: RHEL-131190, RHEL-136491, RHEL-136492</changelog>
</package>
<package pkgid="abb0e617f6599e27035dc4df290b31a30a1e08bb27f7d908d837e9713899a830" name="cronie-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="16.el9"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60279</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-13" date="1733918400">- Create anacron timestamp files with correct permissions
- Resolves: RHEL-5376</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-14" date="1744372800">- Rename variables in get_range()
- Step size out fo bound handling 
- Fix range parsing
- Resolves: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-15" date="1747224000">- Move parsing code before separator check
- Related: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-16" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification
- Also use systemd_tmpfiles to create files in /var, to ensure Cronie
- works properly in Image mode
- Resolves: RHEL-131190, RHEL-136491, RHEL-136492</changelog>
</package>
<package pkgid="214af0dd959ffc37203374fd8b5174e7d4bba8964846dde0509c97d36da35e5d" name="cronie-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="16.el9"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60279</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-13" date="1733918400">- Create anacron timestamp files with correct permissions
- Resolves: RHEL-5376</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-14" date="1744372800">- Rename variables in get_range()
- Step size out fo bound handling 
- Fix range parsing
- Resolves: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-15" date="1747224000">- Move parsing code before separator check
- Related: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-16" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification
- Also use systemd_tmpfiles to create files in /var, to ensure Cronie
- works properly in Image mode
- Resolves: RHEL-131190, RHEL-136491, RHEL-136492</changelog>
</package>
<package pkgid="e9da7cab7b76d24062b1ac044d1000320cdb0fddce5ca32d27386c5ae9193429" name="cryptsetup-debuginfo" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="1c47922594837fd8c48e250c61275f108923dac79f8b02f9899e17fe99cb00f6" name="cryptsetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="3b290efe23590343919c76762ac636ee73067b685298719b08402b347b3b85ef" name="cryptsetup-debugsource" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="20af20107b92f442b9bc9137b7f91624a1946607b755943994864a73887743fe" name="cryptsetup-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="9ed5d614526b1404916cc2baa6fe0329296a86b24e259f859805d91068952cc1" name="cryptsetup-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="68b5f69cad626b40d4f59f2811e584b476c669e3c89031c5b48a3228b75b7f60" name="cryptsetup-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="c9a2904375101d4668482dc374ad84b4677dc54c44fdaa96ad5e43659918c19d" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="f5e42ff7715610a9adeb180785da0a5a734ef36b598df4a5b4c09dd002b26144" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="0c7a7980ba33b1fcbf2c47980339d52074c776bb3b5ae0dadd105c4d50e03783" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="d8595998cef66ce5a04a9caefb5c7619e6ee1cadf460475bd9243262561d04ca" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="93237c464f3bc2e2c5261250073eb150838557a1ade995596d3da72a9d1f9583" name="cups-debugsource" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="325805132f16da09879577e9463ab5879c5f8c3d8150f2a23951f3f22b371d64" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="c63ad6c44d73245cacee843076dd0d5c332663250c9a820b6781cf2aeee07023" name="cups-debugsource" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="63a78a7d7fe525674bf50d6fec878bf0d762cc39c4233100ac08a885ec100d76" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="131fd13edb1b6f88382be0300477751cacaf9588877109d006ddbfe87d441404" name="cups-libs-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="d90bd481a66c04b60e4a7f2e4da611fbd064b43d4657388472c06fdab9978465" name="cups-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="1283a6132519a50510dd8195b0536ee0041919fb79b313b3762ccab1a0eba10b" name="cups-libs-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="cb3bc4b8317e5ca2f9f9598376dedb5582f57ad5dc55787082b530038b4bc186" name="cups-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="d5c89b20efa134fc03bfc3ac39dc2f7e0bcb1ad7075aef83ba4d9d6be2fe0b69" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="8d5c8c54873f22c55523083752c729d8ef1985c7459471cbcc8ad0ef74984e89" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="ac0cb2b10bd0481246269f7d4cea9c7e234dd3108b1de652609ea2ed444f55c6" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="1456f1a323ac8927ea5955fa4ad4df84289909ce484cc17fee2339fa56878f4c" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="9528741ef0b2908a4e05e4234bd2fce28d31e40a6bc0ad8e6b0516629a999078" name="curl-debugsource" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="dfe7c90817e094ab2801ae37480994a1359a1dd3644c166da2e9d0ab2f1d46ac" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="7019a13065e6cb4be3d962261e625162eb82e9091eb6812c42f6b97c1498e969" name="curl-debugsource" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="d5dc4df2d8d8977fc77da7ec179d38dea9457a2e49198fd7cf3c9071080e9817" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="a0fc5281059fc37bc8a7a93cec3d9e8da882c7d1a3b171584d5b5f72e07cec32" name="curl-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="dfbfaa941aac4268192c1224117247753607e88c96a02667e92eb61da7cf85b1" name="curl-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="0d72a4849f5cce7fce912c4b6b46097b63a30583184ee48419e06c5f4bf3d4a4" name="cxl-libs-debuginfo" arch="i686">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="a4eed0fd7cd815e232b438e4e0e7d52a0eae88a0f50b17599a4ccedfcec83c44" name="cxl-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="d7d1e9770c61ba96cb297455cd8b4f973dbef1e6cee75451a7060ae04a45cde4" name="cyrus-sasl-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="555eae5f727fd5aa5015481cfc21d88851a3cf55a93dd99ddc9c976b950245b1" name="cyrus-sasl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="f73f6326f227fd8fda2c2e23745ceefbcc7a2c7433dca0bd7eff5e60f0d5d743" name="cyrus-sasl-debugsource" arch="i686">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="9f202f8029345d5481f1a7ba70079209593eeec7557f27c1d160c98697c183ae" name="cyrus-sasl-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="3a0b4bcc8e4dbc579fb448179b86b4e8550c247ee7e58d327815d3fa0cdbf3b9" name="cyrus-sasl-gssapi-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="642728a9f8abed828d13a6e6cc32de0253f1a52d5a137da1e9ef573c87792756" name="cyrus-sasl-gssapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="17a887821c4c9215e07bdab9ab8308a00e0db525e1813c962bb0a9f25a8f9d93" name="cyrus-sasl-lib-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="eb3ec56bff0c4245874929da4ee0e5f3fda58553cbffeda979ecf19c2f48e587" name="cyrus-sasl-lib-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="b45e7283b6d1bc5935c29ea8f0e5250d45b888ecac47d5641c1cd7c83ef655da" name="cyrus-sasl-plain-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="1c9c489577e69769661688d490cfe966d9ef875503a0e9bd19095b9d0990db20" name="cyrus-sasl-plain-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="d5da4068b1270464889cc1e095d98896d418dbcac9a0232e5a9174d701d7f06f" name="cyrus-sasl-scram-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="e48e899c4d32426cb48275cf9b0b64837dd267589f64b31364900e2c0b6460dc" name="cyrus-sasl-scram-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="22.el9_7"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.27-22" date="1743163200">- Remove debug log spam in digestmd5 plugin (RHEL-82172)</changelog>
</package>
<package pkgid="f0dbc436a96a214e4bf60cfefeee53c64ead9be43acb73239743e12a0e0e7fcb" name="daxctl-libs-debuginfo" arch="i686">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="310c62d70f08f1c7cef99980aa1d1a3c19c7ba098ff8cb0d995ed9012939ed65" name="daxctl-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="165432785086defc467ff3e880ed287d100daaf7c4151809de055156d0296df0" name="dbus-broker-debuginfo" arch="x86_64">
  <version epoch="0" ver="28" rel="8.el9"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 28-8" date="1758542400">- Switch from useradd to systemd sysusers
Resolves: RHEL-109036</changelog>
</package>
<package pkgid="8266f2ee365ae72c6b074e1e429ec054d0373d12075c4403ad5ab4f4a662fcfc" name="dbus-broker-debuginfo" arch="x86_64">
  <version epoch="0" ver="28" rel="9.el9_8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 28-8" date="1758542400">- Switch from useradd to systemd sysusers
Resolves: RHEL-109036</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 28-9" date="1786449600">- Fix session bus denial of service via EMFILE during peer setup.
Resolves: RHEL-233014</changelog>
</package>
<package pkgid="066fc4011082f4d04c0f6486dc0cfb84e6c572f493922c4076612d0f80db0150" name="dbus-broker-debugsource" arch="x86_64">
  <version epoch="0" ver="28" rel="8.el9"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 28-8" date="1758542400">- Switch from useradd to systemd sysusers
Resolves: RHEL-109036</changelog>
</package>
<package pkgid="420f542f2c39e42b8a8d406b4f105a616a1e92671c68ae7a50dd0cc8294a4417" name="dbus-broker-debugsource" arch="x86_64">
  <version epoch="0" ver="28" rel="9.el9_8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 28-8" date="1758542400">- Switch from useradd to systemd sysusers
Resolves: RHEL-109036</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 28-9" date="1786449600">- Fix session bus denial of service via EMFILE during peer setup.
Resolves: RHEL-233014</changelog>
</package>
<package pkgid="f68abc624f1a12f9ef87e9441ac9123adbeb0fa9db528550f4b550cb2c773795" name="dbus-debuginfo" arch="i686">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="195d47473d0d3a74196c27a448d9c1923a495eeeb3b0f936dc80a14436eb06e8" name="dbus-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="e9350befaa51cc67944efeae2388d77020045883bb3388ec429fc3dab2f4a92d" name="dbus-debugsource" arch="i686">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="b1566879bb20e4e865dae30bcd113b031ef8768a8c0afea3b7249d15d7e09fb8" name="dbus-debugsource" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="8e0a6f769efa5f61be5b3b4ed9d9709e38ab9c0ff94170ddd0092fc3502e5dc9" name="dbus-libs-debuginfo" arch="i686">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="2f5575ea45a4800407e40e5ab423249c805177eb484cbfe8db9299f7fc332382" name="dbus-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="60e65c8680e196cfcbc2e541d4bfcf0f7cef1749844f232bbcd015cc07d9b072" name="dbus-python-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.18" rel="2.el9.0.1"/>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.18-2.0.1" date="1714824000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="e09938992da6e920fc9eda4fd5f7063f5a55cfda55ea767a9e6228469384a655" name="dbus-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="38528a835706c8c3d0528243edda011a1cb30ffc51bd568e2ef5b7efc9cae2b1" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="3b03512a37c67455e259b12c5ad18eb83eb06dac572a62739ff4a8ad364b91af" name="device-mapper-event-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="3bdac30d3a2513f2e986402192ac3a2f3e5f883453c155ad16292cb2e3e1452f" name="device-mapper-event-libs-debuginfo" arch="i686">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="3d0ea6ff9ba1f5215965241b66425bad1e523b73b9b639ecbc55d33bf0aaea72" name="device-mapper-event-libs-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="e9bf6d599bf7b6e0fb635097f38d0adeb00aa8c1c58339ee0a1474cd8d59c1c6" name="device-mapper-libs-debuginfo" arch="i686">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="4ef757c670d2e7cbe05c1ae355f88fa92f2d9f96b80a966ed209e34b6540724c" name="device-mapper-libs-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="6d2ffdcf08b25762851d397c8e45602792d8dbe419c8b4da2b00c1c34d3a9539" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="d284aa59b706120cba629bc409da0e74e13823750450adf31b1221d2fe3b6d01" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="86fc1db2d4170e901f9b79ff5ef32944c00b4ff81a9739d1bab37e8116e8451e" name="device-mapper-multipath-debugsource" arch="i686">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="07c3f4b36cce96c53613328eaca0002b73639d267bd018770147563282be3d40" name="device-mapper-multipath-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="78f0fdcbaa644da547c5f1a00548ecae6061dc43dc90f71b0d06adda3aba0c93" name="device-mapper-multipath-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="997873e522461ab3769ff1a12721bb91b8c978c44ef75b22584fcabb85cda338" name="device-mapper-multipath-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="be27d1cf9f5ea2fed86a91e9cc69e1237b1576cbabf47acc4a1d2f874265bbc7" name="device-mapper-persistent-data-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="1.el9"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.4-1" date="1682683200">- Update to latest upstream release 1.0.4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.5-1" date="1690459200">- Update to latest upstream release 1.0.5.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.6-1" date="1691582400">- Update to latest upstream release 1.0.6.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.9-1" date="1702468800">- Update to latest upstream release 1.0.9.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.9-2" date="1707393600">- Allow non-zero values in unused index block entries.
- Fix boundary check on the bitset for cached blocks.
- Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
- Fix thin_repair checking keys on a node with a zero key.
- Enhance error message in cache_check suggesting fix when applicable.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.9-3" date="1709553600">- Fix --version string compatibility with LVM tools.
- Fix confusing Broken pipe warning when used in lvconvert --repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.1.0-1" date="1728648000">- Update to latest upstream release 1.1.0.
- Support listing the highest mapped block in thin_ls.
- Introduce thin_migrate for volume migration.
- See CHANGES.</changelog>
</package>
<package pkgid="e85cf20d11797722dade3ac97cee6dc0a777849f44d936dd0fc6b0ce10643251" name="device-mapper-persistent-data-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="1.el9"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.4-1" date="1682683200">- Update to latest upstream release 1.0.4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.5-1" date="1690459200">- Update to latest upstream release 1.0.5.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.6-1" date="1691582400">- Update to latest upstream release 1.0.6.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.9-1" date="1702468800">- Update to latest upstream release 1.0.9.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.9-2" date="1707393600">- Allow non-zero values in unused index block entries.
- Fix boundary check on the bitset for cached blocks.
- Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
- Fix thin_repair checking keys on a node with a zero key.
- Enhance error message in cache_check suggesting fix when applicable.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.9-3" date="1709553600">- Fix --version string compatibility with LVM tools.
- Fix confusing Broken pipe warning when used in lvconvert --repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.1.0-1" date="1728648000">- Update to latest upstream release 1.1.0.
- Support listing the highest mapped block in thin_ls.
- Introduce thin_migrate for volume migration.
- See CHANGES.</changelog>
</package>
<package pkgid="97e4d5d08fe34143cf43c6bcaabc33fe57973361dcc2027972d720e230a51b38" name="dhcp-client-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9.rocky.0.1"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 12:4.4.2-20.b1.rocky.0.1" date="1767960000">- Change bug tracker path</changelog>
</package>
<package pkgid="f3e60584c48185e4f0661616723a32420bda425068c895b51e2cbc2094a3d4d3" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9.rocky.0.1"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 12:4.4.2-20.b1.rocky.0.1" date="1767960000">- Change bug tracker path</changelog>
</package>
<package pkgid="dda63373bd321182488c8498b07f83c87d28f4a6d089de25ab2d3d75ab65930d" name="dhcp-debugsource" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9.rocky.0.1"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 12:4.4.2-20.b1.rocky.0.1" date="1767960000">- Change bug tracker path</changelog>
</package>
<package pkgid="80b962e187a1e8bdbe9c344ec86e16c82c515e16209fb7bcb645b77d42ff68bc" name="dhcp-relay-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9.rocky.0.1"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 12:4.4.2-20.b1.rocky.0.1" date="1767960000">- Change bug tracker path</changelog>
</package>
<package pkgid="2bdfc2b76bacf276235a56e50df26f3d3ed0c22886976926b0fd4da543aa21ff" name="dhcp-server-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9.rocky.0.1"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 12:4.4.2-20.b1.rocky.0.1" date="1767960000">- Change bug tracker path</changelog>
</package>
<package pkgid="2bdc58b631e4d3284bd55c3c61fdcdb37b825aa4c926f79ea5eb4618f98874fd" name="diffutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-4" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 3.7-7" date="1602158400">- Fix from gnulib upstream, commit 175e0bc (bug #1863423).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.7-9" date="1616587200">- Fix coverity issues</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7-10" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.7-11" date="1624449600">- Resolves: #1975121, Handle SIGSTKSZ no longer being a constant.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f48d91fe8a396034840772c0f2e74b9b3cd48f9a5519efe1fa8eebfdb76a1160" name="diffutils-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-4" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 3.7-7" date="1602158400">- Fix from gnulib upstream, commit 175e0bc (bug #1863423).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.7-9" date="1616587200">- Fix coverity issues</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7-10" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.7-11" date="1624449600">- Resolves: #1975121, Handle SIGSTKSZ no longer being a constant.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="400c5795965b3fd4a5e46825178bd412685adc94f994b28bbcc816787eb68842" name="ding-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="34419b99686bc9eb7f2e0f5c1b3ac8479e2bce17fa17965c48e0fea62a29f357" name="ding-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="26247e4ce17426b96b765c0c6586592e7153da48546f7b057f81a835d6c7759d" name="ding-libs-debugsource" arch="i686">
  <version epoch="0" ver="0.6.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="bfaaae23e5d6a2148a9f25a9766eb6cf0907a8da56ad7ec36e99f35e61900cb2" name="ding-libs-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="3e86912cc79f6214e9410af9b31f9c0678f025f9b676f83ec13e0f34c50bcdb6" name="dmidecode-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.6" rel="2.el9"/>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.5-2" date="1703246400">- Add processor support from SMBIOS-3.6.0
- Consistently use read_file when reading from a dump file</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.5-3" date="1704801600">- Expanding the list of CPU sockets to match the list specified in SMBIOS 3.7.0</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.6-1" date="1722859200">- updated to upstream v3.6</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.6-2" date="1760529600">- update to upstream fa268715
  Resolves: RHEL-97702</changelog>
</package>
<package pkgid="884bcd19b5e42fd38d1661550f8bce691d0ad2a9559bd6f4ac878eedae495773" name="dmidecode-debugsource" arch="x86_64">
  <version epoch="1" ver="3.6" rel="2.el9"/>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.5-2" date="1703246400">- Add processor support from SMBIOS-3.6.0
- Consistently use read_file when reading from a dump file</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.5-3" date="1704801600">- Expanding the list of CPU sockets to match the list specified in SMBIOS 3.7.0</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.6-1" date="1722859200">- updated to upstream v3.6</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.6-2" date="1760529600">- update to upstream fa268715
  Resolves: RHEL-97702</changelog>
</package>
<package pkgid="315243ee5d09a9d9221a1ba58d3aafa5ea937c02db7b2b9735fa621ad3be378b" name="dos2unix-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4.2" rel="4.el9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 7.4.1-1" date="1569326400">- Update to 7.4.1 (#1755150)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.1-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.1-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Monitoring &lt;release-monitoring@fedoraproject.org&gt; - 7.4.2-1" date="1602504000">- Update to 7.4.2 (#1887599)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.4.2-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6b17a73af32d640b7f2e0a5322d0ed0c1cceb0af8b4e42241cfa7d6543cc8a29" name="dos2unix-debugsource" arch="x86_64">
  <version epoch="0" ver="7.4.2" rel="4.el9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 7.4.1-1" date="1569326400">- Update to 7.4.1 (#1755150)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.1-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.1-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Monitoring &lt;release-monitoring@fedoraproject.org&gt; - 7.4.2-1" date="1602504000">- Update to 7.4.2 (#1887599)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.4.2-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fb37f4377863416a3ea76d3c36d1cb9159505d0212eaf22085db6e53e1207b59" name="dosfstools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-11" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 4.2-1" date="1612180800">- New version
  Resolves: rhbz#1922767</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="029289b786231ea2ec19fa4e24fff49671efb349ac6cfc27de7d4c1daf6b91e5" name="dosfstools-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-11" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 4.2-1" date="1612180800">- New version
  Resolves: rhbz#1922767</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d119a176d241cdc02264b5c7d0c661cc73d902dc29e2093d5f898e14bd5cb83f" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="110.git20260130.el9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-67.git20240812" date="1723464000">- feat(systemd): install systemd-executor
- test: use -device instead of -watchdog to remove qemu
- fix(fips): remove /dev/{random,urandom} pre-creation
- fix(systemd): always include sg module
- fix(fips): do not blindly remove /boot
- fix(github): update format of labeler
- fix(network-manager): add "After" dependency on dbus.service
- fix(url-lib.sh): nfs_already_mounted() with trailing slash in
- feat(systemd-pcrphase): introducing the systemd-pcrphase
- fix(systemd-pcrphase): only include
- fix(nfs): include also entries from /usr/lib/{passwd,group}</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-70.git20240819" date="1724068800">- fix(systemd): set right permissions for the machine-id file
- feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
- feat(dracut-init.sh): give --force-add precedence over --omit</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
</package>
<package pkgid="00970a48f56536936b7134573b4eb85cf4c3404c6c1d58bd0d7b4490b58f3fef" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="115.git20260527.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="d01aa7151c8490d6df0c1bda4912d0d05800df09ed84baa9a372c577555c41dc" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="117.git20260625.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
</package>
<package pkgid="0e7509b5abd0f8d638a84687863718710e93bbff14982e2cddf2117c7473571c" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="120.git20260728.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-120.git20260728" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in</changelog>
</package>
<package pkgid="66f1774bd0bd563ccadcf01477175e5ade03b932b56e209d6cdb6077492d7e86" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="110.git20260130.el9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-67.git20240812" date="1723464000">- feat(systemd): install systemd-executor
- test: use -device instead of -watchdog to remove qemu
- fix(fips): remove /dev/{random,urandom} pre-creation
- fix(systemd): always include sg module
- fix(fips): do not blindly remove /boot
- fix(github): update format of labeler
- fix(network-manager): add "After" dependency on dbus.service
- fix(url-lib.sh): nfs_already_mounted() with trailing slash in
- feat(systemd-pcrphase): introducing the systemd-pcrphase
- fix(systemd-pcrphase): only include
- fix(nfs): include also entries from /usr/lib/{passwd,group}</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-70.git20240819" date="1724068800">- fix(systemd): set right permissions for the machine-id file
- feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
- feat(dracut-init.sh): give --force-add precedence over --omit</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
</package>
<package pkgid="16f992d0a3f32858133cd0c9fde89c36cba216841bfdc33c5e1aab2027ed4a46" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="115.git20260527.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="29e7d435afa13a701fd261443c9774d18243307c9990eb78239a63b70fe9de04" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="117.git20260625.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
</package>
<package pkgid="8c371eb95ba99e1d6b18663b3aac530dcbaaec0ccd9c9ef389b19c27c661a67a" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="120.git20260728.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-120.git20260728" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in</changelog>
</package>
<package pkgid="98d37f043d9076f19ccc944e5334f137a873c15f44961c87c7caaad10ffddfeb" name="e2fsprogs-debuginfo" arch="i686">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="61ccf83014c724e3684c56517d30e23dc74cf5f833dd6d96f7f2a81b6dcab3b7" name="e2fsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="f3dee5c3aa1eb5f336d9716b69835df8ea0e6284e8d55a3c540cd41a7628b19c" name="e2fsprogs-debugsource" arch="i686">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="4a75ace26a34e316246649ce10ed86abaac8e3dc62ab53f303b326cc48086c47" name="e2fsprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="d15f4ef1b433b4799caf5e12880e7fa093a9b6b9774d1c26674adf3ca6ddd74f" name="e2fsprogs-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="d91f404c083c7191c514282433403a0b431cd58a801464004e714c67d8db5b0e" name="e2fsprogs-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="4fd64bf3f30357c3297c7ea9e66ac1fd389f8c75b7ed117b2ab8e4c0fc569ec3" name="ed-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.2-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.2-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="128e67e8d1a5f870b7ea9c43cdc484b0a595590fc625b4de39891150a8619ffa" name="ed-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.2-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.2-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f6e30978dd2d7b620779c76b6fea665486ebd0c2fe291344ccedc4a96f8b8a47" name="efibootmgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="16" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 16-9" date="1596715200">- FTBFS fixes for Rawhide and ELN</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 16-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 16-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3fd59537b3c3ac1ac7518e56f234c566e8291d95ab442d2cd25c45b8d43cd07c" name="efibootmgr-debugsource" arch="x86_64">
  <version epoch="0" ver="16" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 16-9" date="1596715200">- FTBFS fixes for Rawhide and ELN</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 16-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 16-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0ad810577368abba6a6f56be0cc0b8c7f2e9d449b06304af801cef6c327027b4" name="efivar-debuginfo" arch="i686">
  <version epoch="0" ver="38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 37-16" date="1623931200">- Enable Intel Control-flow Enforcement Technology (CET)
  Resolves: rhbz#1808811</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-1" date="1643716800">- New upstream release (38)
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-2" date="1643803200">- Bump to re-run tests; no code changes
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-3" date="1673438400">- Fix inheritance of buildflags
- Resolves: #2144520</changelog>
</package>
<package pkgid="868b661554fdce7a5265746488cb487afb9a8c1c32502516e3c338514a07ea1e" name="efivar-debuginfo" arch="x86_64">
  <version epoch="0" ver="38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 37-16" date="1623931200">- Enable Intel Control-flow Enforcement Technology (CET)
  Resolves: rhbz#1808811</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-1" date="1643716800">- New upstream release (38)
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-2" date="1643803200">- Bump to re-run tests; no code changes
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-3" date="1673438400">- Fix inheritance of buildflags
- Resolves: #2144520</changelog>
</package>
<package pkgid="8e8800780a191c56acbd71b4f9ab32a59ca89cab3872c9b1fb4754900ad91e0f" name="efivar-debugsource" arch="i686">
  <version epoch="0" ver="38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 37-16" date="1623931200">- Enable Intel Control-flow Enforcement Technology (CET)
  Resolves: rhbz#1808811</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-1" date="1643716800">- New upstream release (38)
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-2" date="1643803200">- Bump to re-run tests; no code changes
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-3" date="1673438400">- Fix inheritance of buildflags
- Resolves: #2144520</changelog>
</package>
<package pkgid="71bb2cf9282cd8604cf614998a74aa7f32bb78dbe234e94b64694b3b3476274d" name="efivar-debugsource" arch="x86_64">
  <version epoch="0" ver="38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 37-16" date="1623931200">- Enable Intel Control-flow Enforcement Technology (CET)
  Resolves: rhbz#1808811</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-1" date="1643716800">- New upstream release (38)
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-2" date="1643803200">- Bump to re-run tests; no code changes
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-3" date="1673438400">- Fix inheritance of buildflags
- Resolves: #2144520</changelog>
</package>
<package pkgid="393f587e7a8288d8b0f6d0d766153cf344b3b6a56926a63ad539b006e02a8b87" name="efivar-libs-debuginfo" arch="i686">
  <version epoch="0" ver="38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 37-16" date="1623931200">- Enable Intel Control-flow Enforcement Technology (CET)
  Resolves: rhbz#1808811</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-1" date="1643716800">- New upstream release (38)
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-2" date="1643803200">- Bump to re-run tests; no code changes
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-3" date="1673438400">- Fix inheritance of buildflags
- Resolves: #2144520</changelog>
</package>
<package pkgid="3bcf16d208a9e8a188b92c8bb74d08f1d4c53d91d4e064175cb399a84fd8b5ec" name="efivar-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 37-16" date="1623931200">- Enable Intel Control-flow Enforcement Technology (CET)
  Resolves: rhbz#1808811</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-1" date="1643716800">- New upstream release (38)
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-2" date="1643803200">- Bump to re-run tests; no code changes
- Resolves: #2024374</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-3" date="1673438400">- Fix inheritance of buildflags
- Resolves: #2144520</changelog>
</package>
<package pkgid="4be36c5fc037e8dc56e728a73332d9aaae4b4a3bba46ce453671730c4aa02f13" name="elfutils-debuginfo" arch="i686">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="7b3a8548ff333e096d575cd69b72d53f8a1748f015b1c246045a816bf2cccba3" name="elfutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="82ede8bebe2ced74099f8ee44c5290148ee1d283580fd8a8ca393565328e8eac" name="elfutils-debuginfod-client-debuginfo" arch="i686">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="848809c553654c3c0f155d6b13148cd5779cfc39bf4ea2ae2e191a1e5c0dc77e" name="elfutils-debuginfod-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="2ee317bfc33e08fdee92584a04555c2c47c41ea7204fbb40c283baee68f39533" name="elfutils-debugsource" arch="i686">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="8f4dcea6a736353166c4931deeb537d2b2dd851cf034878ddc92b4ad1f468656" name="elfutils-debugsource" arch="x86_64">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="fdf497a45c5fe931a3e735a714987d3b6d73ef6e7b7fbb216e1f4b5a29478057" name="elfutils-libelf-debuginfo" arch="i686">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="d3c05594b9e995f6cd6b2fd82d5404f37394c62623c07ca580ba332935639558" name="elfutils-libelf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="b42aa42090debe7e2a45d9d8ae55401b439d7acc32dfe3a90af0027a44cd8062" name="elfutils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="f85543fa3f0c73323b83b3e4092ff3a6e991cfeaff3b665e7082586e52e7a284" name="elfutils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.194" rel="1.el9.rocky.0.1"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.192-6" date="1741953600">- Add elfutils-0.192-fix-free.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.193-1" date="1746014400">- Upgrade to upstream elfutils 0.193
- Drop upstreamed patches
  elfutils-0.192-fix-free.patch
  elfutils-0.192-libelf-static.patch
  elfutils-0.192-stacktrace-lto.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 0.194-1" date="1761739200">- Upgrade to upstream elfutils 0.194
- Add elfutils-0.194-alloc-jobs.patch</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-1.rocky.0.1" date="1767441600">- Remove debuginfod URL</changelog>
</package>
<package pkgid="472077c539e9be52298addd6a0c37abbea92b368e757cf21070a98c8cc68949b" name="environment-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="2.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.3.0-1" date="1684324800">- Rebase to environment-modules 5.3.0 (rhbz#2207885)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.3.0-2" date="1742212800">- fix intermittent test failures (RHEL-82109)
- fix source-sh test with non-default manpath (RHEL-82109)</changelog>
</package>
<package pkgid="3cee33b597dda5d319481b096f7749ef27c3554494cd9a284a6173bca4eaad35" name="environment-modules-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="2.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.3.0-1" date="1684324800">- Rebase to environment-modules 5.3.0 (rhbz#2207885)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.3.0-2" date="1742212800">- fix intermittent test failures (RHEL-82109)
- fix source-sh test with non-default manpath (RHEL-82109)</changelog>
</package>
<package pkgid="70bc1fe23848cfdfddc32b59fc172bf0c5949bfe40e4b3f7fad963703eaf585e" name="ethtool-debuginfo" arch="x86_64">
  <version epoch="2" ver="6.15" rel="2.el9"/>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.10-1" date="1727265600">- Upgrade to 6.10 (RHEL-60269)</changelog>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.11-1" date="1728475200">- Upgrade to 6.11 (RHEL-60269)</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 2:6.15-1" date="1750766400">- Update to latest upstream release v6.15.
  Resolves: RHEL-94954</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 2:6.15-2" date="1753963200">- netlink: fix missing headers in text output.
  Resolves: RHEL-106540</changelog>
</package>
<package pkgid="62b1801b03c12c2437365728597e77516cf26e31fd2afcbf996e97c0f183a55e" name="ethtool-debugsource" arch="x86_64">
  <version epoch="2" ver="6.15" rel="2.el9"/>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.10-1" date="1727265600">- Upgrade to 6.10 (RHEL-60269)</changelog>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.11-1" date="1728475200">- Upgrade to 6.11 (RHEL-60269)</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 2:6.15-1" date="1750766400">- Update to latest upstream release v6.15.
  Resolves: RHEL-94954</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 2:6.15-2" date="1753963200">- netlink: fix missing headers in text output.
  Resolves: RHEL-106540</changelog>
</package>
<package pkgid="5ca1f8e9c94ff32863c565683f1dea9031739f526966cb9c8c2a8de14860755b" name="exfatprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="2.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.1.3-1" date="1650456000">- Rebase</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.1.3-2" date="1652097600">- Fix memomry leak</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.1.3-3.test" date="1653393600">- Fix some covscan issues</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.0-1" date="1678104000">- Rebase
  Related: rhbz#2173273</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.0-2" date="1678708800">- Fix wrong BZ number in git log
  Related: rhbz#2173273</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.2-1" date="1699272000">- Rebase to upstream v1.2.2
- Related: RHEL-15865
- Related: RHEL-14995</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.2-2" date="1702036800">- Backport fixes for issues found by OpenScanHub
- Related: RHEL-7945</changelog>
</package>
<package pkgid="53cad75194e574dbfdf178f989c059e82702b6f92d66fafa253a6a9203783f22" name="exfatprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="2.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.1.3-1" date="1650456000">- Rebase</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.1.3-2" date="1652097600">- Fix memomry leak</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.1.3-3.test" date="1653393600">- Fix some covscan issues</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.0-1" date="1678104000">- Rebase
  Related: rhbz#2173273</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.0-2" date="1678708800">- Fix wrong BZ number in git log
  Related: rhbz#2173273</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.2-1" date="1699272000">- Rebase to upstream v1.2.2
- Related: RHEL-15865
- Related: RHEL-14995</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.2-2" date="1702036800">- Backport fixes for issues found by OpenScanHub
- Related: RHEL-7945</changelog>
</package>
<package pkgid="d8db8d7d1c53ec0488958fec90c83624affffd12d0c48bf36c0473877d0588f3" name="expat-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.0" rel="6.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-2" date="1707825600">- Fix parsing of large tokens
- Reject direct parameter entity recursion
- Resolves: RHEL-29699
- Resolves: RHEL-29696</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
</package>
<package pkgid="902bd0aaad8b1ca684282f589b74f6b0f67d29f645b433ca10971e898d76768e" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="6.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-2" date="1707825600">- Fix parsing of large tokens
- Reject direct parameter entity recursion
- Resolves: RHEL-29699
- Resolves: RHEL-29696</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
</package>
<package pkgid="33e06155409acce2f7d0636a6fd257ba91ff24abd4a5f453eb1de236e504501f" name="expat-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="67bdf59b074a4305b05a82e02cacdaacfacfc7f7b5d4c7431a2620c1535f0946" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="16ab6a3d9965cc23d5a05c2fcf5fd938584ec7b458326e85d5d9d8a929023f94" name="expat-debugsource" arch="i686">
  <version epoch="0" ver="2.5.0" rel="6.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-2" date="1707825600">- Fix parsing of large tokens
- Reject direct parameter entity recursion
- Resolves: RHEL-29699
- Resolves: RHEL-29696</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
</package>
<package pkgid="769876cdb26af2f6cc60e0828dc1bc69b8b71ce2d69628b094e362506869798c" name="expat-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="6.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-2" date="1707825600">- Fix parsing of large tokens
- Reject direct parameter entity recursion
- Resolves: RHEL-29699
- Resolves: RHEL-29696</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
</package>
<package pkgid="6419c12f2df0c1a699a22918d969eca3256bb5ed8ee6cd9a88c7cf989b13bb73" name="expat-debugsource" arch="i686">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="d946e38d594967540b0dc943536223eb7b633857cf9bb14bcf6db42a24459e84" name="expat-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="611d028888cc3e38494d18a7b8f6d3fd82e58666212d21c0f3853d9e7d7e82f8" name="fcoe-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.34" rel="0.git14ef0d2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.32-12.git9834b34" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.33-0.gitfe376de" date="1600689600">- FTBFS: fix gcc 10.2 truncation and overflow errors
- rebase to 1.0.33+ from new upstream location</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.0.33-1.gitfe376de" date="1603886400">- Disable fatal diagnostics from gcc-11 for fipvlan</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.0.33-2.gitfe376de" date="1605355200">- Disable fatal diagnostic from gcc-11 for fping</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.33-3.gitfe376de" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.33-4.git848bcc6" date="1612180800">- drop any differences with upstream service and config files</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.33-5.git848bcc6" date="1612267200">- add in RHEL conditional for removed fcoe.ko support</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.33-6.git848bcc6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.33-7.git848bcc6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.34-0.git14ef0d2" date="1631188800">- upstream 1.0.34
- drop gcc warning diabling patch, upstream fixes exist for these issues now
- #1961180 FCoE interface name regressions</changelog>
</package>
<package pkgid="976382f7012fe61bfcd35d9cea75cfd4d91739ed80214a46ee17ad403de5c7bf" name="fcoe-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.34" rel="0.git14ef0d2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.32-12.git9834b34" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.33-0.gitfe376de" date="1600689600">- FTBFS: fix gcc 10.2 truncation and overflow errors
- rebase to 1.0.33+ from new upstream location</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.0.33-1.gitfe376de" date="1603886400">- Disable fatal diagnostics from gcc-11 for fipvlan</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.0.33-2.gitfe376de" date="1605355200">- Disable fatal diagnostic from gcc-11 for fping</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.33-3.gitfe376de" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.33-4.git848bcc6" date="1612180800">- drop any differences with upstream service and config files</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.33-5.git848bcc6" date="1612267200">- add in RHEL conditional for removed fcoe.ko support</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.33-6.git848bcc6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.33-7.git848bcc6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.34-0.git14ef0d2" date="1631188800">- upstream 1.0.34
- drop gcc warning diabling patch, upstream fixes exist for these issues now
- #1961180 FCoE interface name regressions</changelog>
</package>
<package pkgid="0e41aa2ff59c7a9c4f92c3274b6dbaada81afbaa6355b97eded750228f8e31bc" name="file-debuginfo" arch="i686">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="ffab4a13d2f728722dcfdbe130f58faab99d9a8fca6061ef36d95ad32ba0e44e" name="file-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="4966debc495a088aec04f48b21d08851b28a6ad5179548221bfd7a9bde6e2640" name="file-debugsource" arch="i686">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="3eafa871ec34555aa6ef374cee5f596793cecff318f0decc83f12cf563618c8f" name="file-debugsource" arch="x86_64">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="65848c0ffb769af183254b83b2cfbf5f102fa91d89f12a864f0dab26edde09e2" name="file-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="37bbeb2d9df335821b39cb3b8dabc1e7e54c6e926a57e375d1bc9ddc00a513c9" name="file-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="fe990e30c3087af6bc42841d372d5a7ede55aba42b052d8ff9bda6bf93975499" name="findutils-debuginfo" arch="x86_64">
  <version epoch="1" ver="4.8.0" rel="7.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.8.0-6" date="1692273600">- fix find not obeying option -ignore_readdir_race in symlink_loop (#2232519)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.8.0-7" date="1720094400">- fix autofs patch when stat was not performed (RHEL-45721)</changelog>
</package>
<package pkgid="dca21127dbae60113902dbe9531f8282f4113feb512db65b37c25c0b15bb8939" name="findutils-debugsource" arch="x86_64">
  <version epoch="1" ver="4.8.0" rel="7.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.8.0-6" date="1692273600">- fix find not obeying option -ignore_readdir_race in symlink_loop (#2232519)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.8.0-7" date="1720094400">- fix autofs patch when stat was not performed (RHEL-45721)</changelog>
</package>
<package pkgid="e3f2c077d5d5d736fc84fc39398218615b8c508f8ebb430430a0d9b63592ee68" name="freetype-debuginfo" arch="i686">
  <version epoch="0" ver="2.10.4" rel="10.el9_5"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 2.10.4-10" date="1742558400">- Fix for CVE-2025-27363 out-of-bound write vulnerability
- Patch initially by Marc Deslauriers of Canonical
- https://www.openwall.com/lists/oss-security/2025/03/14/3
- Adjusted for EL9 by Jonathan Wright of AlmaLinux
- and a member of the Meta security team
- Resolves: RHEL-83105</changelog>
</package>
<package pkgid="6179764967db58067fd4c69749473325e973c6fa09e1677cbe72060cd9731a08" name="freetype-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="10.el9_5"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 2.10.4-10" date="1742558400">- Fix for CVE-2025-27363 out-of-bound write vulnerability
- Patch initially by Marc Deslauriers of Canonical
- https://www.openwall.com/lists/oss-security/2025/03/14/3
- Adjusted for EL9 by Jonathan Wright of AlmaLinux
- and a member of the Meta security team
- Resolves: RHEL-83105</changelog>
</package>
<package pkgid="3a6616a20c85471aa0eb27be8e383be3dbd6ed8dd90b92945d5e13bfbf4a2303" name="freetype-debugsource" arch="i686">
  <version epoch="0" ver="2.10.4" rel="10.el9_5"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 2.10.4-10" date="1742558400">- Fix for CVE-2025-27363 out-of-bound write vulnerability
- Patch initially by Marc Deslauriers of Canonical
- https://www.openwall.com/lists/oss-security/2025/03/14/3
- Adjusted for EL9 by Jonathan Wright of AlmaLinux
- and a member of the Meta security team
- Resolves: RHEL-83105</changelog>
</package>
<package pkgid="1fda309896d942d2ff50d1d5afc9cf38e21b286ddc8f1f60644c007c634987c2" name="freetype-debugsource" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="10.el9_5"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 2.10.4-10" date="1742558400">- Fix for CVE-2025-27363 out-of-bound write vulnerability
- Patch initially by Marc Deslauriers of Canonical
- https://www.openwall.com/lists/oss-security/2025/03/14/3
- Adjusted for EL9 by Jonathan Wright of AlmaLinux
- and a member of the Meta security team
- Resolves: RHEL-83105</changelog>
</package>
<package pkgid="833ce0e4be31d8b87dc8028d7317de02227ad691a941f032e7b18b2aafefe86a" name="fuse-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.9" rel="17.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-16" date="1718366400">- null-terminate buffer in fuse_req_getgroups()</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1733140800">- Bump release to test gating
  Related: RHEL-69609</changelog>
</package>
<package pkgid="2bd640053dd92aa2c36ec5c8ad180f526ed8e374404ee446dfe0d477cf96d092" name="fuse-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="17.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-16" date="1718366400">- null-terminate buffer in fuse_req_getgroups()</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1733140800">- Bump release to test gating
  Related: RHEL-69609</changelog>
</package>
<package pkgid="4fdec3d514ec4d610b6d6640775d953d51dab7b3464bce2a9c808235db6f66d4" name="fuse-debugsource" arch="i686">
  <version epoch="0" ver="2.9.9" rel="17.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-16" date="1718366400">- null-terminate buffer in fuse_req_getgroups()</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1733140800">- Bump release to test gating
  Related: RHEL-69609</changelog>
</package>
<package pkgid="6e5185b66b00e0ca65d750043e756818e7946399640bcf5ec380a36b6a4e5e66" name="fuse-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="17.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-16" date="1718366400">- null-terminate buffer in fuse_req_getgroups()</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1733140800">- Bump release to test gating
  Related: RHEL-69609</changelog>
</package>
<package pkgid="4722376de6e590545a2d51ec839d5bcf6dabe61defeed88051037bc173c10dad" name="fuse-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.9" rel="17.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-16" date="1718366400">- null-terminate buffer in fuse_req_getgroups()</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1733140800">- Bump release to test gating
  Related: RHEL-69609</changelog>
</package>
<package pkgid="3301446cd417f60abcd24208542a2bfd81d70476f5048c3167ad3b6d36dbb75c" name="fuse-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="17.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-16" date="1718366400">- null-terminate buffer in fuse_req_getgroups()</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1733140800">- Bump release to test gating
  Related: RHEL-69609</changelog>
</package>
<package pkgid="4c55ecafb7af0fdbd8cdede5dadaf096bed00f2991248e788370d2605d489ff6" name="fuse3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="9.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.10.2-6" date="1689249600">- Fix feature_notify_inode_expire_only related(rhbz#2188182)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.10.2-7" date="1706616000">- Synchronize expire-only API with upstream.
- Related: RHEL-23414</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.10.2-8" date="1707307200">- Advertise support of FUSE_PARALLEL_DIROPS to kernel
- Related: RHEL-24721</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.10.2-9" date="1718625600">- libfuse: null-terminate buffer in fuse_req_getgroups()</changelog>
</package>
<package pkgid="397f4bebd4ed7ffb15ff635447a846a2fc4191d5fd837ed22352ed783b344cd2" name="fwupd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="2.el9_8.rocky.0.2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842
- Resolves: #RHEL-16637
- Resolves: #RHEL-35373
- Resolves: #RHEL-61930</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.29-1" date="1742299200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.31-1" date="1752235200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 2.0.19-1" date="1767960000">- Rebase to get new hardware support
- Resolves: #RHEL-125778</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.0.19-2.rocky.0.1" date="1775131200">- Use system-sb-certs for certificates
- Patch macros to generate a proper sbat
- Pad aarch64 fwupd-efi binary after pefile.write() so its .data section does
  not extend past EOF, which newer pesign rejects</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 2.0.19-2.rocky.0.2" date="1779537600">- Bump release for rebuild against new rocky-sb-certs package</changelog>
</package>
<package pkgid="95d7e08ef11fdbfc80e3f52268663c48b55704430f381489304087e64ddc5055" name="fwupd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="2.el9_8.rocky.0.2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842
- Resolves: #RHEL-16637
- Resolves: #RHEL-35373
- Resolves: #RHEL-61930</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.29-1" date="1742299200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.31-1" date="1752235200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 2.0.19-1" date="1767960000">- Rebase to get new hardware support
- Resolves: #RHEL-125778</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.0.19-2.rocky.0.1" date="1775131200">- Use system-sb-certs for certificates
- Patch macros to generate a proper sbat
- Pad aarch64 fwupd-efi binary after pefile.write() so its .data section does
  not extend past EOF, which newer pesign rejects</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 2.0.19-2.rocky.0.2" date="1779537600">- Bump release for rebuild against new rocky-sb-certs package</changelog>
</package>
<package pkgid="87d3dcb467a6927a2008386406a7838ec099ece51531264aa3a09f7a52520496" name="gawk-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="6.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.0.1-8" date="1582027200">- Split the package into the main package and locales subpackage</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-1" date="1595332800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-6" date="1645012800">Fix the issue with incorect handling of return values of some processes
Resolves: rhbz#2055107</changelog>
</package>
<package pkgid="579c20a279e590b49b4e59e73015da6590055c15d96136558744404bbc8a801f" name="gawk-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="6.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.0.1-8" date="1582027200">- Split the package into the main package and locales subpackage</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-1" date="1595332800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-6" date="1645012800">Fix the issue with incorect handling of return values of some processes
Resolves: rhbz#2055107</changelog>
</package>
<package pkgid="7a45a504051edca2f12291193e0efdda07ab3d74d1239eee952e2384803a639d" name="gcab-debuginfo" arch="i686">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="52994e17f4427089693fd94ec5f243bc3c45a93a8129c51b28e96c22dcde76e7" name="gcab-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d0450c77ae6a78d2bee7ff9d0e3d5d3de6b77f80f5f2911dc4700ae24755aabc" name="gcab-debugsource" arch="i686">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6b7adae72684552ecc934162ee8ae7d022985971227fc5108e32ad0e619e4d13" name="gcab-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="09e66ee2d92e97c622d1cd5e5de8c6957680f27919e863f40bee572d68c0dfc7" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="eae65d3f6314ea68a0b20461c0855b4cf94a227f90dbec71a6e49d0bcea0c3e1" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="b6996963cd65552ab28019f2e1845c203904fa0fcc3e671a91960ff77369a7db" name="gcc-debugsource" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="010184736bcea756e9328e4398d3f9e13d09ac1ff007803590d9f97a6203e5bd" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="282203cf95d2d542d08a6f232a55603deccfc28b0d33f6bac77c882e01d60565" name="gdbm-debuginfo" arch="i686">
  <version epoch="1" ver="1.23" rel="1.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-1" date="1712145600">- Update to 1.23</changelog>
</package>
<package pkgid="8f39ea8a9162915ff2f220b7064670fbed4e38bf6f7cde22458e2d7db1a82b5d" name="gdbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.23" rel="1.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-1" date="1712145600">- Update to 1.23</changelog>
</package>
<package pkgid="9fa2a6a7c1a78ffe2019fed43c91a39d58e3b19c81f70219cc60aee6bd6b23bb" name="gdbm-debugsource" arch="i686">
  <version epoch="1" ver="1.23" rel="1.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-1" date="1712145600">- Update to 1.23</changelog>
</package>
<package pkgid="421701322dc0cf71d653b6deacbe097fd0d3ed0ef4285d809a8e62d9fca1afec" name="gdbm-debugsource" arch="x86_64">
  <version epoch="1" ver="1.23" rel="1.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-1" date="1712145600">- Update to 1.23</changelog>
</package>
<package pkgid="1e301d31f50b61c8f525ecbd5d9d4d386f9b5dd613dc0c5e7c46ae89f6c08274" name="gdbm-libs-debuginfo" arch="i686">
  <version epoch="1" ver="1.23" rel="1.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-1" date="1712145600">- Update to 1.23</changelog>
</package>
<package pkgid="c88a1efca0453b1b4d06ed5441020a519b0abdfedaba0c4a68bbcce3afd536a7" name="gdbm-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.23" rel="1.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-1" date="1712145600">- Update to 1.23</changelog>
</package>
<package pkgid="14121efab7199fce6bf3dbdf66fe166c48dddb2db9ce34c02e53d85ab5a3c84b" name="gettext-debuginfo" arch="i686">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="b183e5df618c9d7990821e26daa693b7f83286cb3d4d5dc209eb571ba0d71c05" name="gettext-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="e74e19dd2613eb760f4eb4fff4569027c07cc540280761bdb56d7bdc40379d96" name="gettext-debugsource" arch="i686">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="4b7290848601063d4a4aedd814d3ae6e02682a0cce87f3c5491237896448059d" name="gettext-debugsource" arch="x86_64">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="e5b056d01ccef4c9815b966a8e6980a587c762ccb8ff3048cca01c134cf62d05" name="gettext-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="b4a8ddbb4e5dc4a4ba00fc2827ab11ae2710dea19e1a63a5037c8886aca8268e" name="gettext-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="bce5b2ec0518d68495e1aad83174d5f8a95c730dd954e5bf3f25ae1d31ccc909" name="glib-networking-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.3" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.68~rc-1" date="1615809600">- Update to 2.68.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.68.0-1" date="1616414400">- Update to 2.68.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.68.0-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.1-1" date="1620043200">- Update to 2.68.1
- Resolves: #1947188</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.1-2" date="1623067200">- Disable libproxy in RHEL
- Resolves: #1968554</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.68.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.2-1" date="1630584000">- Update to 2.68.2
- Resolves: #1993765</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-1" date="1638792000">- Update to 2.68.3
- Resolves: #1947187</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-2" date="1645531200">- Reenable libproxy dependency
- Resolves: #2056988</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-3" date="1645704000">- Recommends: libproxy-webkitgtk4 for glib-pacrunner
- Related: #2056988</changelog>
</package>
<package pkgid="8239d847eb523d702b6ef0a02935919fe121ed938a8f8c23b23acb69ac1faf84" name="glib-networking-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.3" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.68~rc-1" date="1615809600">- Update to 2.68.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.68.0-1" date="1616414400">- Update to 2.68.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.68.0-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.1-1" date="1620043200">- Update to 2.68.1
- Resolves: #1947188</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.1-2" date="1623067200">- Disable libproxy in RHEL
- Resolves: #1968554</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.68.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.2-1" date="1630584000">- Update to 2.68.2
- Resolves: #1993765</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-1" date="1638792000">- Update to 2.68.3
- Resolves: #1947187</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-2" date="1645531200">- Reenable libproxy dependency
- Resolves: #2056988</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-3" date="1645704000">- Recommends: libproxy-webkitgtk4 for glib-pacrunner
- Related: #2056988</changelog>
</package>
<package pkgid="f59908acf15e7bc842633afd2b9d572b11b3ea5dee7af46e00109455f65d98c3" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="bca579db971c3cd0f36baf7dfeec0871ba63a6621ff0954c7cd41e6f725c9c57" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="26cad6f004b747be3107a8f35c5049087f57d1f0a791a43eefbacc61c3eaaf3b" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="e35ddeaf5e055d6652c7ded0ddf6326d360741cbb8851cdfc2971ccd93c43a4f" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="d7d4c45ed8e3adddeafc79efdba4776824a3711c8febfd09695f44f4758174b4" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="c36348090ba5fb52bcc6a287d764e0fcd1dc533b85bec8cd4f7d785a623cae8d" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="166b96b798b67d959788df7bf496bcf18a1b9a158ef60d86ccc55503a8f55706" name="glib2-debugsource" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="0461bcd173ccc09458cbd62b958aec4bdb504890374698d230966595d9d12fc9" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="5acab07d35acc7ae81bf6a7d636121790bdfdcee194e1127f2c3e413fd4d5358" name="glib2-debugsource" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="b95a540839616a515a42a89316070c003d30d68f0828d117348f9ba288849a37" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="893feee01db355545ea46608effc854cbd5413cd6bd8fefdf22c2ad84d00ce4e" name="glib2-debugsource" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="775e1f179a3b1d72236b7ad685b6f705eb5885a08e33a18432eb9f152d0d4c7f" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="3ba5d259eba0cff27990498b58a45d90f102f7da3e28852fb74d5a8ace7fefd1" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="21747cb266f85346668786ec849e099a3fda0daeee583e3b33a12e0c21ee95e3" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="4bd62ab8a946c6ff4111f5d3092736ef268d54a29e6efd5b0c24319ba8958fdd" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="822ccdb5b0e3a1f076a0888e9a130279cb2915f7635252b6173118ae87478177" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="0a6d675df050b6155051d1e3503dd44e4dc67236cfac8ed922e16e3f933cd033" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="85727113a451b707f87db97f010de5a53f0960bae84cf595739ead10892c96e1" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="afd0fbca293dcf97192e3df91238d13015552e6ab965e3a1e854b1eb81ee81fb" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="127f02524a2fa68aa4e1d948774e3338a057d6952ef0a315df7c8099e20d49ee" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="fb2b6860b2e7bc3857305aeb21dc4f14a021b0e4d2a5190c9bb876de2c66bd5b" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="d84b8f2e36111b763637f1d8bd8aedeb4b20316fa9402112fffbb0d7de7d7a33" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="4b7bcf054ddfa36297b2e0beff3effa6b29b8d2edb8af0daade2b839dba06826" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="af80af4eb80a7c3eb19a8068bd3287b9bd5bd56f9a4e5cb5bbb28b864371d2d6" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="a3760a78799d7b51aef7fce6d7111b1495b67ed526eb315760cf29d51787e2b9" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="f579aa03a772cba3116717310dd965e685f50a53ecadedca067e6cd6e89369cf" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="aad4fa610c1a274bb37fa65724c813157d48b3feca4cf1f2d24a8feeab7f8b7a" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="3ace4ec80c81c302abba315f505e3a6bfeff0bfb42f24d88efbdf0e241ac93a3" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="f281e632bbceff9266056b4e94f32f5eeeda544c979478582678e494b1277093" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="24699f7c35181da51d45d2d15f85581ec22e5108e23ce2a383279e5810345fa8" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="3d5203338ca40f11432653d5bb46684e81ef818fccaa95dbc959e92e3915d6ca" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="e71dfba577b94cbb0b69d0092b3d270d2251e1210ec23f34b2a522080ada25d4" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="6d446aaa0e91179cd3672fcc1af52146d4ad2e62e4fd9dcb7071d7973d6bfcea" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="ffd183d850a1e123b2d5b4f2ac6f5a5f6a3b1cd3338b7acba79cb45210c7994a" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="9ede2c0fca9e42bf7a20fe97f52ee98cb7e04baa661e82854c3d815b3111b6d0" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="183ac5ed10e31e7b1c005ea80f45a6e5db24471c1839113fab05a170552ff107" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="7387a349751b1f659614b57323312ffa53a2068b60d2c3e9c10a3af4fb132d67" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="7fb957ebdfe4a8f5d7277b1303d680ca36d2aa7461e9055da044acd6c2266549" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="d9023b9ccf2ffe089593af8c68d3c4f5d0ea427e8c6896209d85710a70fc4b0f" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="81b38fd45012867475bc01590ffda3bb5a7d0bfb2e0712f3f5a4e7fa809d5c40" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="a9497f4ff7c10f63dc1b1bb058386c57734900faf517f87f4f10fb9cc9a5ab79" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="12b2c1f854cab2cfc5b1aadcf6c13ea24a402492bfcc927cf961768f377495e6" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="66267fa3312364ef9d6db3f87fe20d74ffe363efd711bf6adf4040472708bd52" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="b3cc6f7524eca197d3988dd1ab729014aea40f57c6334c9f8f4df3f65779c097" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="350139cf1333e7f2c28927cf289d4346b195ea2c71a7c7949871d64ced805e59" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="7f3913309003d34d09c2fbb640007a29c6c0d0267147fa258c3a83eb4de511d4" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="66e554365fa66c40637a4fabf2717d73559992125902223382fd29f98f1e6b3e" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="3a2eeae817e4c48b36d8d647f2a6f783518f2465ab21db72536285155c7eac1a" name="gmp-debuginfo" arch="i686">
  <version epoch="1" ver="6.2.0" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:6.2.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-9" date="1629288000">- Move the .hmac files to the fipscheck subfolder
- Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
Resolves: rhbz#1980758</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-10" date="1630065600">- Add the support for intel CET
Resolves: rhbz#1977890</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-11" date="1686052800">Fix: Integer overflow and resultant buffer overflow via crafted input
Resolves: CVE-2021-43618</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-12" date="1689681600">- Add SIMD optimization patches for s390x (provided by the IBM)
Resolves: rhbz#2044216</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-13" date="1691064000">- Fix: previous commit removed one function from the library and thus broke the ABI
- function gmpn_preinv_divrem_1 should now not be removed
Related: rhbz#2044216</changelog>
</package>
<package pkgid="d6e60216fc06b14d3bb025aa670a48772cc6807cf3260f97eb721b9e7ced9ea1" name="gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="6.2.0" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:6.2.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-9" date="1629288000">- Move the .hmac files to the fipscheck subfolder
- Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
Resolves: rhbz#1980758</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-10" date="1630065600">- Add the support for intel CET
Resolves: rhbz#1977890</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-11" date="1686052800">Fix: Integer overflow and resultant buffer overflow via crafted input
Resolves: CVE-2021-43618</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-12" date="1689681600">- Add SIMD optimization patches for s390x (provided by the IBM)
Resolves: rhbz#2044216</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-13" date="1691064000">- Fix: previous commit removed one function from the library and thus broke the ABI
- function gmpn_preinv_divrem_1 should now not be removed
Related: rhbz#2044216</changelog>
</package>
<package pkgid="4c92f8768321c039c6f60b0af0ec13a76df340454fc65cc6577b7c9169e9e3b0" name="gmp-debugsource" arch="i686">
  <version epoch="1" ver="6.2.0" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:6.2.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-9" date="1629288000">- Move the .hmac files to the fipscheck subfolder
- Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
Resolves: rhbz#1980758</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-10" date="1630065600">- Add the support for intel CET
Resolves: rhbz#1977890</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-11" date="1686052800">Fix: Integer overflow and resultant buffer overflow via crafted input
Resolves: CVE-2021-43618</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-12" date="1689681600">- Add SIMD optimization patches for s390x (provided by the IBM)
Resolves: rhbz#2044216</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-13" date="1691064000">- Fix: previous commit removed one function from the library and thus broke the ABI
- function gmpn_preinv_divrem_1 should now not be removed
Related: rhbz#2044216</changelog>
</package>
<package pkgid="316634d2b1132d18e0f8d7d761b33c5766fc663e5918017c037887a4e1721c17" name="gmp-debugsource" arch="x86_64">
  <version epoch="1" ver="6.2.0" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:6.2.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-9" date="1629288000">- Move the .hmac files to the fipscheck subfolder
- Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
Resolves: rhbz#1980758</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-10" date="1630065600">- Add the support for intel CET
Resolves: rhbz#1977890</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-11" date="1686052800">Fix: Integer overflow and resultant buffer overflow via crafted input
Resolves: CVE-2021-43618</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-12" date="1689681600">- Add SIMD optimization patches for s390x (provided by the IBM)
Resolves: rhbz#2044216</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-13" date="1691064000">- Fix: previous commit removed one function from the library and thus broke the ABI
- function gmpn_preinv_divrem_1 should now not be removed
Related: rhbz#2044216</changelog>
</package>
<package pkgid="b8465da9e14c5ec899528d618bff0f02dd93dd0f19bad988aa27fbb898f3cf3b" name="gnupg2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="5.el9_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.3.3-5" date="1768305600">- Fix CVE-2025-68973 (gpg.fail/memcpy)</changelog>
</package>
<package pkgid="cd8d909c162c6edc0c9694c6ed411915205a48518626adbbcea17143aa4c386d" name="gnupg2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="5.el9_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.3.3-5" date="1768305600">- Fix CVE-2025-68973 (gpg.fail/memcpy)</changelog>
</package>
<package pkgid="758032c3f9cfe01be1837c117d3382d44c34b90b604be47cb6728ce3135d002f" name="gnutls-debuginfo" arch="i686">
  <version epoch="0" ver="3.8.10" rel="3.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-3" date="1711108800">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-4" date="1712318400">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
</package>
<package pkgid="bda94fd2b7e742ca96a232fd653b7fb1231d04f78a089676c67ae88063af8aef" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-3" date="1711108800">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-4" date="1712318400">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
</package>
<package pkgid="58570343e20ffade9b1bb702f47127c1f305e3f0d0f816c7eb5d97c5e2ac400a" name="gnutls-debuginfo" arch="i686">
  <version epoch="0" ver="3.8.10" rel="4.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="b98fa09987b27b92ff238247c6a8d38ba28124089fb1187180806e66adcd2356" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="070a86493e2b102922f9e1b8521209e184f0a7c74fb40a4815f4fb4bee110ced" name="gnutls-debuginfo" arch="i686">
  <version epoch="0" ver="3.8.10" rel="8.el9_8"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840000">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-5" date="1781006400">- Use full hash+sign operations in pct_test (RHEL-172270)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-6" date="1781265600">- Fix order of previous changelog entries (RHEL-172270)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-7" date="1782993600">- fips: Allow SigVer only with RSA keys with modulus &gt;= 2048 bits</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-8" date="1783512000">- Rebuild to target RHEL-9.8</changelog>
</package>
<package pkgid="fa77e42faad79d5f0c355c5ff14f23f8e4d0915f28f065565789cc12e50ac1df" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="8.el9_8"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840000">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-5" date="1781006400">- Use full hash+sign operations in pct_test (RHEL-172270)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-6" date="1781265600">- Fix order of previous changelog entries (RHEL-172270)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-7" date="1782993600">- fips: Allow SigVer only with RSA keys with modulus &gt;= 2048 bits</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-8" date="1783512000">- Rebuild to target RHEL-9.8</changelog>
</package>
<package pkgid="c82608ec2a4f36dfdf0b05f92f05bdf01df23618ed0de7841ce0f5348938d17f" name="gnutls-debugsource" arch="i686">
  <version epoch="0" ver="3.8.10" rel="3.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-3" date="1711108800">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-4" date="1712318400">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
</package>
<package pkgid="953aa3fad8425c3b55faf4a87a52fc757f67eb593c23628eec36d783664e0fa3" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-3" date="1711108800">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-4" date="1712318400">- Bump release to ensure el9 package is greater than el9_* packages</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
</package>
<package pkgid="b6902ee7faf9fc669c4953086c95d5799a072f4fbbbbf97b6054497bdfa60a7a" name="gnutls-debugsource" arch="i686">
  <version epoch="0" ver="3.8.10" rel="4.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="bbf9051cfdf9dfe380088d3a699625cec31389332f0c34f8a014e451628c2afe" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.8.3-5" date="1739361600">- Backport the fix for CVE-2024-12243 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-6" date="1739793600">- Bump nettle dependency to 3.10.1 (RHEL-52740)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-7" date="1752840000">- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840001">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="d9ed8d3671d4687a0b887f795e25026297bda30a256d1370be79ea6a5484e3e8" name="gnutls-debugsource" arch="i686">
  <version epoch="0" ver="3.8.10" rel="8.el9_8"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840000">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-5" date="1781006400">- Use full hash+sign operations in pct_test (RHEL-172270)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-6" date="1781265600">- Fix order of previous changelog entries (RHEL-172270)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-7" date="1782993600">- fips: Allow SigVer only with RSA keys with modulus &gt;= 2048 bits</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-8" date="1783512000">- Rebuild to target RHEL-9.8</changelog>
</package>
<package pkgid="50b63224fc851753734d7aa0ea529e1abdc8dd28e203f06aecf68b1af3f0f9b8" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="8.el9_8"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-8" date="1752840000">- Add missing changelog entry</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.3-9" date="1754395200">- key_update: rework the rekeying logic (RHEL-107499)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-1" date="1762430400">- Rebase to 3.8.10
- Revert defaulting to PBMAC1 in FIPS mode
- Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-2" date="1768392000">- Reinstate and update the prematurely dropped rekeying patch</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770379200">- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1813 (pkcs11-provider persistent keys)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1822 (SCT extension parser OOB read)
- Fix upstream security issue #1841 (key zeroization in hybrid kex)
- Fix upstream security issue #1823 (malformed certtool template)
- Fix upstream security issue #1817 (session parameter loading robustness)
- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-5" date="1781006400">- Use full hash+sign operations in pct_test (RHEL-172270)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 3.8.10-6" date="1781265600">- Fix order of previous changelog entries (RHEL-172270)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-7" date="1782993600">- fips: Allow SigVer only with RSA keys with modulus &gt;= 2048 bits</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-8" date="1783512000">- Rebuild to target RHEL-9.8</changelog>
</package>
<package pkgid="5ab2fd2f48f6446e1541d930e47ace000c8fceff867a0963b68622844d298fca" name="gobject-introspection-debuginfo" arch="i686">
  <version epoch="0" ver="1.68.0" rel="11.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-6" date="1625918400">- Add Requires on python-markdown for g-ir-doc-tool (#1979144)
- Add license texts and documentation files (#1979144)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 1.68.0-8" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-9" date="1633694400">- Add Conflicts for i686/x86_64 devel subpackage (#1915339)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-10" date="1634212800">- Change Conflicts syntax (#1915339)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.68.0-11" date="1667563200">- Fix FTBFS for a possible Meson rebase
- Resolves: rhbz#2140108</changelog>
</package>
<package pkgid="f41afd3589d9caea6d056d40f9e0a628b4211b0e3b2d216649b2a81618b42c0b" name="gobject-introspection-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.68.0" rel="11.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-6" date="1625918400">- Add Requires on python-markdown for g-ir-doc-tool (#1979144)
- Add license texts and documentation files (#1979144)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 1.68.0-8" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-9" date="1633694400">- Add Conflicts for i686/x86_64 devel subpackage (#1915339)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-10" date="1634212800">- Change Conflicts syntax (#1915339)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.68.0-11" date="1667563200">- Fix FTBFS for a possible Meson rebase
- Resolves: rhbz#2140108</changelog>
</package>
<package pkgid="4ef75b7aac816d8e187a4afa40465402e6fd6a426b86b895877cf0419c7be229" name="gobject-introspection-debugsource" arch="i686">
  <version epoch="0" ver="1.68.0" rel="11.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-6" date="1625918400">- Add Requires on python-markdown for g-ir-doc-tool (#1979144)
- Add license texts and documentation files (#1979144)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 1.68.0-8" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-9" date="1633694400">- Add Conflicts for i686/x86_64 devel subpackage (#1915339)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-10" date="1634212800">- Change Conflicts syntax (#1915339)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.68.0-11" date="1667563200">- Fix FTBFS for a possible Meson rebase
- Resolves: rhbz#2140108</changelog>
</package>
<package pkgid="2aec26d66da4ae2abf61153a985aa36919dfe48599aa9fff1466ff53f34d9cd3" name="gobject-introspection-debugsource" arch="x86_64">
  <version epoch="0" ver="1.68.0" rel="11.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-6" date="1625918400">- Add Requires on python-markdown for g-ir-doc-tool (#1979144)
- Add license texts and documentation files (#1979144)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 1.68.0-8" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-9" date="1633694400">- Add Conflicts for i686/x86_64 devel subpackage (#1915339)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.68.0-10" date="1634212800">- Change Conflicts syntax (#1915339)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.68.0-11" date="1667563200">- Fix FTBFS for a possible Meson rebase
- Resolves: rhbz#2140108</changelog>
</package>
<package pkgid="d0908be597d800917ff37125ad8da7b7fa3296892e1641d9c1abb95992f1c355" name="gpgme-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-4" date="1626436800">- Fix license and covscan issues
  Resolves: #1938732</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-6" date="1645099200">- Rebuild
  Resolves: #2035319</changelog>
</package>
<package pkgid="5efbb1641e2e6384f43f4d5631ad363f1eb4e055ae9cadd741a62d03eb6bb842" name="gpgme-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-4" date="1626436800">- Fix license and covscan issues
  Resolves: #1938732</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-6" date="1645099200">- Rebuild
  Resolves: #2035319</changelog>
</package>
<package pkgid="238a6272ffee708ddd72638572d85d8eca01109d20837b2817fa6cf085dcfad6" name="gpgme-debugsource" arch="i686">
  <version epoch="0" ver="1.15.1" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-4" date="1626436800">- Fix license and covscan issues
  Resolves: #1938732</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-6" date="1645099200">- Rebuild
  Resolves: #2035319</changelog>
</package>
<package pkgid="e765caacd8484f41a77dc6e1da3c41ec2a5f0dd913a859fc67b557a8a6bfbeec" name="gpgme-debugsource" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-4" date="1626436800">- Fix license and covscan issues
  Resolves: #1938732</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-6" date="1645099200">- Rebuild
  Resolves: #2035319</changelog>
</package>
<package pkgid="455405f87a60fe00de944e4604836788b0506368d72c81b5fc396bbdd4001009" name="graphite2-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.14" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.13-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-1" date="1586347200">- Update to version 1.3.14.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-2" date="1590494400">- Add missing build dependencies for building the manual with TeXLive 2020.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-5" date="1596283201">- Adapt to new cmake macros.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-6" date="1601467200">- Stop building the HTML manual, texlive is breaking things too frequently.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a09b26f01e86e1f2929e5ada3c008fa9ff0b01f6918b6e74e4de6adcbf20f23e" name="graphite2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.13-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-1" date="1586347200">- Update to version 1.3.14.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-2" date="1590494400">- Add missing build dependencies for building the manual with TeXLive 2020.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-5" date="1596283201">- Adapt to new cmake macros.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-6" date="1601467200">- Stop building the HTML manual, texlive is breaking things too frequently.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b4b9091619beff9d52a4d1f143b109536599c237258059b3b443b891974e4c55" name="graphite2-debugsource" arch="i686">
  <version epoch="0" ver="1.3.14" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.13-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-1" date="1586347200">- Update to version 1.3.14.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-2" date="1590494400">- Add missing build dependencies for building the manual with TeXLive 2020.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-5" date="1596283201">- Adapt to new cmake macros.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-6" date="1601467200">- Stop building the HTML manual, texlive is breaking things too frequently.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="42b648a52e2062168d6829de2eb5b7013d62a64dc075bf29822a5c4a7b74a967" name="graphite2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.13-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-1" date="1586347200">- Update to version 1.3.14.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-2" date="1590494400">- Add missing build dependencies for building the manual with TeXLive 2020.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-5" date="1596283201">- Adapt to new cmake macros.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3.14-6" date="1601467200">- Stop building the HTML manual, texlive is breaking things too frequently.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="13ac2d6b34c87192c1ea6101a42e6b898ff68e456734c2a948cbee22e3a437a2" name="grep-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.4-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 3.4-5" date="1598443200">- Backport fix for upstream #28105 to fix zgrep
  Resolves: rhbz#1872913
- Remove some non-portable tests that fail on armv7hl (Paul Eggert)
  Resolves: rhbz#1863830</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.5-1" date="1601467200">- New version
  Resolves: rhbz#1883086</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.6-1" date="1604923200">- New version
  Resolves: rhbz#1895797</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.6-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.6-4" date="1624881600">- Fixed stack overflow detection
  Resolves: rhbz#1975156</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.6-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="62a72df76b5f4654fce5706f3db19dec6cfc95ed5aa18a8f07da92ae69a788ef" name="grep-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.4-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 3.4-5" date="1598443200">- Backport fix for upstream #28105 to fix zgrep
  Resolves: rhbz#1872913
- Remove some non-portable tests that fail on armv7hl (Paul Eggert)
  Resolves: rhbz#1863830</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.5-1" date="1601467200">- New version
  Resolves: rhbz#1883086</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.6-1" date="1604923200">- New version
  Resolves: rhbz#1895797</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.6-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.6-4" date="1624881600">- Fixed stack overflow detection
  Resolves: rhbz#1975156</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.6-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b3d883e8335e79051eeff7eab08a9301f4bb6d5e69a3e03e339cd27dbdf70e62" name="groff-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="10.el9.0.1"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-1" date="1583409600">- Update to version 1.22.4
  resolves: #1808072</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-3" date="1601640000">- Use make macros</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-4" date="1604404800">- Move pdfpic.tmac to groff-base
  resolves: #1888370</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-6" date="1613995200">- Add psutils as a runtime dependency (needed for groff -Thtml)</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-7" date="1615982400">- Make psutils a weak dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-10" date="1633953600">- Fix several important Covscan defects
  resolves: #1938735</changelog>
</package>
<package pkgid="3acdb204a9ce879bfcf4910dec285f3e6ecaa8372e1e2c1d44005307e920b55d" name="groff-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="10.el9.0.1"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-1" date="1583409600">- Update to version 1.22.4
  resolves: #1808072</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-3" date="1601640000">- Use make macros</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-4" date="1604404800">- Move pdfpic.tmac to groff-base
  resolves: #1888370</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-6" date="1613995200">- Add psutils as a runtime dependency (needed for groff -Thtml)</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-7" date="1615982400">- Make psutils a weak dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-10" date="1633953600">- Fix several important Covscan defects
  resolves: #1938735</changelog>
</package>
<package pkgid="6099ebdc37fde4ec4a354251ee3b17a72c14150c93e61f85c313638590935a8b" name="groff-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="10.el9.0.1"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-1" date="1583409600">- Update to version 1.22.4
  resolves: #1808072</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-3" date="1601640000">- Use make macros</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-4" date="1604404800">- Move pdfpic.tmac to groff-base
  resolves: #1888370</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-6" date="1613995200">- Add psutils as a runtime dependency (needed for groff -Thtml)</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-7" date="1615982400">- Make psutils a weak dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-10" date="1633953600">- Fix several important Covscan defects
  resolves: #1938735</changelog>
</package>
<package pkgid="7efe202a11a51c8e62ff9052482651c2b6000f2b975c1d686b1b750ccef020ce" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="126.el9_8.rocky.0.3"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.06-126.rocky.0.2" date="1779278400">- Update certs (jdieter)
- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.06-126.rocky.0.3" date="1779537600">- Bump for rebuild with new certs since we pulled in the wrong ones on the last build</changelog>
</package>
<package pkgid="4b259e429f90ec2d18db9313f391b16685c3261e6961101cb8ff09f7805b1ab6" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="126.el9_8.rocky.0.3"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.06-126.rocky.0.2" date="1779278400">- Update certs (jdieter)
- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.06-126.rocky.0.3" date="1779537600">- Bump for rebuild with new certs since we pulled in the wrong ones on the last build</changelog>
</package>
<package pkgid="783d0ee288d5817270949e0ba5cfd653c272f41945978c4885145ae33d6b27a8" name="grub2-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="126.el9_8.rocky.0.3"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.06-126.rocky.0.2" date="1779278400">- Update certs (jdieter)
- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.06-126.rocky.0.3" date="1779537600">- Bump for rebuild with new certs since we pulled in the wrong ones on the last build</changelog>
</package>
<package pkgid="738b6ea08d9f1e7a0d45c967acc86fada8249f875e477101e2a4e31f1a3bfeda" name="grub2-tools-efi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="126.el9_8.rocky.0.3"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.06-126.rocky.0.2" date="1779278400">- Update certs (jdieter)
- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.06-126.rocky.0.3" date="1779537600">- Bump for rebuild with new certs since we pulled in the wrong ones on the last build</changelog>
</package>
<package pkgid="83483780b09bda056d096bfc1e7a866530cbfa25acaa735c87d5f51fc876c17e" name="grub2-tools-extra-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="126.el9_8.rocky.0.3"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.06-126.rocky.0.2" date="1779278400">- Update certs (jdieter)
- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.06-126.rocky.0.3" date="1779537600">- Bump for rebuild with new certs since we pulled in the wrong ones on the last build</changelog>
</package>
<package pkgid="d6fd51b5e575285d2d6768f00629e3a4512cd108928d0ad32dc0b8c463291ba0" name="grub2-tools-minimal-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="126.el9_8.rocky.0.3"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.06-126.rocky.0.2" date="1779278400">- Update certs (jdieter)
- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.06-126.rocky.0.3" date="1779537600">- Bump for rebuild with new certs since we pulled in the wrong ones on the last build</changelog>
</package>
<package pkgid="8791e6a6a08dd6b1128bf47746262592dd1c15657e24aaa4dee85cf13e40ed82" name="grubby-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.40" rel="69.el9"/>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 8.40-64" date="1704888000">- Do not overwrite all vars that start with GRUB_CMDLINE_LINUX
- Resolves: #RHEL-21301</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-65" date="1733400000">- On grub cfg updates, run grub2-mkconfig for Xen systems
  Resolves: #RHEL-50691</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-66" date="1733486400">- grubby-bls: on PPC systems, remove petiboot's version checks
- Resolves: #RHEL-61421</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 8.40-67" date="1747656000">- Bump NVR
- Related: #RHEL-61421</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-68" date="1753876800">- Update cfg when setting a default kernel
  Resolves: #RHEL-106612</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-69" date="1756900800">- grubby-bls: in s390* systems, run zipl on grub cfg update event
  Resolves: #RHEL-106612</changelog>
</package>
<package pkgid="58f111435b4cf81a763122ec944cc9c3929fbd43242be89a354a7a62868b4da2" name="grubby-debugsource" arch="x86_64">
  <version epoch="0" ver="8.40" rel="69.el9"/>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 8.40-64" date="1704888000">- Do not overwrite all vars that start with GRUB_CMDLINE_LINUX
- Resolves: #RHEL-21301</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-65" date="1733400000">- On grub cfg updates, run grub2-mkconfig for Xen systems
  Resolves: #RHEL-50691</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-66" date="1733486400">- grubby-bls: on PPC systems, remove petiboot's version checks
- Resolves: #RHEL-61421</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 8.40-67" date="1747656000">- Bump NVR
- Related: #RHEL-61421</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-68" date="1753876800">- Update cfg when setting a default kernel
  Resolves: #RHEL-106612</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-69" date="1756900800">- grubby-bls: in s390* systems, run zipl on grub cfg update event
  Resolves: #RHEL-106612</changelog>
</package>
<package pkgid="bc502c92b0d23eb80ca8d282c606a7401e1058d0bc36b5d6ffc559ac3c463b70" name="gssproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="7.el9"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.8.4-5" date="1680523200">- Add an option for minimum lifetime
- Resolves: rhbz#2184333
- Remove unused patch files
- Fix date typographical error in changelog</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.8.4-6" date="1680696000">- Use openldap-servers from EPEL repo for testing
- Resolves: rhbz#2187634</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.8.4-7" date="1723118400">- Fix various issues detected by static analysis
  Resolves: RHEL-51177</changelog>
</package>
<package pkgid="a9b1a42cfb8dc7a0782bf2bb118bf31762d7226fadb89de0dfaf690d983dd6c0" name="gssproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="7.el9"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.8.4-5" date="1680523200">- Add an option for minimum lifetime
- Resolves: rhbz#2184333
- Remove unused patch files
- Fix date typographical error in changelog</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.8.4-6" date="1680696000">- Use openldap-servers from EPEL repo for testing
- Resolves: rhbz#2187634</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.8.4-7" date="1723118400">- Fix various issues detected by static analysis
  Resolves: RHEL-51177</changelog>
</package>
<package pkgid="6a2913ba38e741fef51baaef480225210f121f80af7b8c772e48d9e7598d90ef" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.10-6" date="1627646400">- Add gating tests
Resolves: rhbz#1986357</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.10-7" date="1627646401">- Add the ibm patches dealing with s390x optimizations
Resolves: rhbz#1986357</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.12-1" date="1650628800">- Rebase to gzip 1.12
- Resolves an arbitrary-file-write vulnerability in zgrep
  Resolves: rhbz#2073343
  Resolves: rhbz#1870675</changelog>
</package>
<package pkgid="0f72f8a154381c77972dd2cfe544750aa07b2ae12ce0415c126fe06e4b97d201" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12" rel="2.el9_8"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.12-2" date="1786708800">- Fix an issue with a temporary file creations when mktemp is missing (41991)
- Fix a global buffer overflow vulnerability in the LZH decompression logic (41992)
Resolves: CVE-2026-41991
Resolves: CVE-2026-41992</changelog>
</package>
<package pkgid="b7e8c268c9c3f31db5ef1901a533670a7ac23172d9445d927221e4441795bbd0" name="gzip-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.10-6" date="1627646400">- Add gating tests
Resolves: rhbz#1986357</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.10-7" date="1627646401">- Add the ibm patches dealing with s390x optimizations
Resolves: rhbz#1986357</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.12-1" date="1650628800">- Rebase to gzip 1.12
- Resolves an arbitrary-file-write vulnerability in zgrep
  Resolves: rhbz#2073343
  Resolves: rhbz#1870675</changelog>
</package>
<package pkgid="696a1a67ebffa1abfef341534d9ae93d88be3cfd957db79f73ec1e522ebe05fd" name="gzip-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12" rel="2.el9_8"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.12-2" date="1786708800">- Fix an issue with a temporary file creations when mktemp is missing (41991)
- Fix a global buffer overflow vulnerability in the LZH decompression logic (41992)
Resolves: CVE-2026-41991
Resolves: CVE-2026-41992</changelog>
</package>
<package pkgid="3208c045e40efbb4f0f9c904f0c8dde957026f75d4c34b14d97d7baaf66c618e" name="harfbuzz-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.4" rel="10.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-6" date="1657886400">- Resolves:rh#2103849 CVE-2022-33068
  harfbuzz: integer overflow in the component hb-ot-shape-fallback.c</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-7" date="1658145600">- Resolves:rh#2103849 CVE-2022-33068
- Fix Covscan compiler warning for inclusion of parenthesis
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-8" date="1658145601">- Resolves:rh#2103849
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-9" date="1694260800">- Resolves:RHEL-2268 CVE-2023-25193</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-10" date="1695038400">- Resolves:RHEL-2268 Fix CI tests results</changelog>
</package>
<package pkgid="25077a94913fac2df36e2af4edf4b9d03177230f3c14156e6798dd29ed65fdc5" name="harfbuzz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="10.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-6" date="1657886400">- Resolves:rh#2103849 CVE-2022-33068
  harfbuzz: integer overflow in the component hb-ot-shape-fallback.c</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-7" date="1658145600">- Resolves:rh#2103849 CVE-2022-33068
- Fix Covscan compiler warning for inclusion of parenthesis
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-8" date="1658145601">- Resolves:rh#2103849
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-9" date="1694260800">- Resolves:RHEL-2268 CVE-2023-25193</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-10" date="1695038400">- Resolves:RHEL-2268 Fix CI tests results</changelog>
</package>
<package pkgid="f8b883bda11da484a15692f9db0c2a1f1a674b207ae2232ed176232210981cf5" name="harfbuzz-debugsource" arch="i686">
  <version epoch="0" ver="2.7.4" rel="10.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-6" date="1657886400">- Resolves:rh#2103849 CVE-2022-33068
  harfbuzz: integer overflow in the component hb-ot-shape-fallback.c</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-7" date="1658145600">- Resolves:rh#2103849 CVE-2022-33068
- Fix Covscan compiler warning for inclusion of parenthesis
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-8" date="1658145601">- Resolves:rh#2103849
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-9" date="1694260800">- Resolves:RHEL-2268 CVE-2023-25193</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-10" date="1695038400">- Resolves:RHEL-2268 Fix CI tests results</changelog>
</package>
<package pkgid="15e53c0ce51c8e1ffcb099a2426c0b2f3620ef5a933bfe62a4f2cb0732a77da7" name="harfbuzz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="10.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-6" date="1657886400">- Resolves:rh#2103849 CVE-2022-33068
  harfbuzz: integer overflow in the component hb-ot-shape-fallback.c</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-7" date="1658145600">- Resolves:rh#2103849 CVE-2022-33068
- Fix Covscan compiler warning for inclusion of parenthesis
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-8" date="1658145601">- Resolves:rh#2103849
- Update tests.yaml</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-9" date="1694260800">- Resolves:RHEL-2268 CVE-2023-25193</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.7.4-10" date="1695038400">- Resolves:RHEL-2268 Fix CI tests results</changelog>
</package>
<package pkgid="2d86e5c461fdef4d7540ef7df4b9b9a172ad1d042dd66c6a1e1f23f9c261ac23" name="hdparm-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.62" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.58-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.58-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.58-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.60-1" date="1617969600">- New upstream version 9.60 (#1947860)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.60-2" date="1618488000">- Move hdparm binary to /usr/sbin</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9.60-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.60-4" date="1618574401">- Fix fclose() on sysfs file write</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.62-1" date="1621512000">- New upstream version 9.62 (#1961841)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9.62-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f6dc6b7bcffe35d0f36811e722ff8d9c46a8285845245b545cb54f98f067c6ac" name="hdparm-debugsource" arch="x86_64">
  <version epoch="0" ver="9.62" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.58-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.58-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.58-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.60-1" date="1617969600">- New upstream version 9.60 (#1947860)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.60-2" date="1618488000">- Move hdparm binary to /usr/sbin</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9.60-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.60-4" date="1618574401">- Fix fclose() on sysfs file write</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 9.62-1" date="1621512000">- New upstream version 9.62 (#1961841)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9.62-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1ab716faebbaf428296cc276212db8be92057a14138af23bee27365f71d23cf2" name="hostname-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.23" rel="6.el9"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.22-1" date="1567166400">- New release v3.22 (#1747011)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.23-1" date="1573732800">- New version 3.23 (#1771102)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.23-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.23-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9266a6ce03f4bed41bbe39ca8d6b3781dcdd45b6b4137d1143fc9685e8b731ee" name="hostname-debugsource" arch="x86_64">
  <version epoch="0" ver="3.23" rel="6.el9"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.22-1" date="1567166400">- New release v3.22 (#1747011)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.23-1" date="1573732800">- New version 3.23 (#1771102)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.23-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.23-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="89fa42bb21a26c1cfcfe451b44238a94bf4846c8e13035bcc92c635fc06c5f32" name="hwloc-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="93ff7f4b2f72dc6e820c17e75a7cb49fb3e6648c9dbcdb8291e1f701eb19f905" name="hwloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="1b49f58c5c9428d2ca778cf7bc44008adae2b0016198a27a40063aa88fb6b40d" name="hwloc-debugsource" arch="i686">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="a602c8c397956dae42a385c5681823db1e0f918b558ca562baa129499714ca25" name="hwloc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="08aa346e7dfb5ad48539a220f9bcc227a0b570de89cafe66dca5355a16035115" name="hwloc-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="3016c34a14d9eb54fb3cecde5fd1d50ac1a6e67d18ad6c961ad9650c69239227" name="hwloc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="2d74568fb0e2b352df8f6ab17fe43a11074cf8d58a1b73d0084ff1671c64e2a1" name="ibacm-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="5190c68f14ae3c7be7487ce561bbef96568fc3fba42605a989dcffa6d471d10c" name="icu-debuginfo" arch="i686">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="d06451ed08bcd9105e18e10c3155742c0384771ffb52028cad1c4c90e66528ad" name="icu-debuginfo" arch="x86_64">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="2a04d43fa746b7284ae821a1941050ee23e65baaecbec811fca7c7fd13069b6d" name="icu-debugsource" arch="i686">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="6e76a33a165a2b579a84a06d18b3d686298e7ba0713efbcd69ca3fd746499f4e" name="icu-debugsource" arch="x86_64">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="2b0c3cf90f557adb0f2a6206405430c54e1f57128f4139c195c79daf7629e2d7" name="ima-evm-utils-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.2" rel="2.el9.rocky.0.2"/>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-0.1" date="1712923200">- Update to upstream 1.5 (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-1" date="1717502400">- Disable compat build (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-2" date="1717761600">- add some IMA setup tools (RHEL-33751)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-3" date="1731499200">- Skip unsupported file systems for sample appraisal rule (RHEL-62817)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-1" date="1741608000">- ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
- update to upstream 1.6.2 (RHEL-82793)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-2" date="1753963200">- Verify IMA signature to make sure it's correct (RHEL-105471)
- Drop old libimaevm.so.4 (RHEL-82797)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6.2-2.rocky.0.2" date="1761912000">- Add Rocky Linux IMA signing certificate</changelog>
</package>
<package pkgid="92569cf0f96aa48f56a5908e3cc5de3797002ad0bdbaae475c45ec7bb5122317" name="ima-evm-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="2.el9.rocky.0.2"/>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-0.1" date="1712923200">- Update to upstream 1.5 (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-1" date="1717502400">- Disable compat build (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-2" date="1717761600">- add some IMA setup tools (RHEL-33751)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-3" date="1731499200">- Skip unsupported file systems for sample appraisal rule (RHEL-62817)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-1" date="1741608000">- ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
- update to upstream 1.6.2 (RHEL-82793)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-2" date="1753963200">- Verify IMA signature to make sure it's correct (RHEL-105471)
- Drop old libimaevm.so.4 (RHEL-82797)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6.2-2.rocky.0.2" date="1761912000">- Add Rocky Linux IMA signing certificate</changelog>
</package>
<package pkgid="68695b60d9888f2d2d1957b2b49c2e9054395fe83e467c22de3b414d06557779" name="ima-evm-utils-debugsource" arch="i686">
  <version epoch="0" ver="1.6.2" rel="2.el9.rocky.0.2"/>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-0.1" date="1712923200">- Update to upstream 1.5 (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-1" date="1717502400">- Disable compat build (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-2" date="1717761600">- add some IMA setup tools (RHEL-33751)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-3" date="1731499200">- Skip unsupported file systems for sample appraisal rule (RHEL-62817)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-1" date="1741608000">- ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
- update to upstream 1.6.2 (RHEL-82793)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-2" date="1753963200">- Verify IMA signature to make sure it's correct (RHEL-105471)
- Drop old libimaevm.so.4 (RHEL-82797)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6.2-2.rocky.0.2" date="1761912000">- Add Rocky Linux IMA signing certificate</changelog>
</package>
<package pkgid="8f92e6a95229cda084d623aee521c85e5a981f519587e64a4c17314621ce69ac" name="ima-evm-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="2.el9.rocky.0.2"/>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-0.1" date="1712923200">- Update to upstream 1.5 (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-1" date="1717502400">- Disable compat build (RHEL-2969)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-2" date="1717761600">- add some IMA setup tools (RHEL-33751)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-3" date="1731499200">- Skip unsupported file systems for sample appraisal rule (RHEL-62817)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-1" date="1741608000">- ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
- update to upstream 1.6.2 (RHEL-82793)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-2" date="1753963200">- Verify IMA signature to make sure it's correct (RHEL-105471)
- Drop old libimaevm.so.4 (RHEL-82797)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6.2-2.rocky.0.2" date="1761912000">- Add Rocky Linux IMA signing certificate</changelog>
</package>
<package pkgid="d1187f060124d0f442f4f201868693b624be4ea712795a5dc596c74cba2161e2" name="info-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.7" rel="15.el9"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 6.7-6" date="1583409600">- add additional Provides: tex-texinfo ("it's an older code sir, but it checks out")</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 6.7-7" date="1584360000">- Add BR: perl(Unicode::Normalize)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.7-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.7-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-10" date="1612267200">- Fix problem in shell code found by ShellCheck in test script</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.7-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.7-12" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-13" date="1644494400">- Fix issues found by static analysis
  Resolves: #1938884</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-14" date="1645012800">- Rebuild
  Related: #1938884</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-15" date="1645444800">- Rebuild
  Related: #1938884</changelog>
</package>
<package pkgid="3ef806d22909c369acdc3654f4d0e5034b3bacfcbc73cbd6bdce11d1bd89c178" name="inih-debuginfo" arch="i686">
  <version epoch="0" ver="49" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; - 49-6" date="1654862400">- Release bump, no changes</changelog>
</package>
<package pkgid="87c5459fb567a6cba3112af643b13bf64a817872136b4479351fe6c8ebb1c815" name="inih-debuginfo" arch="x86_64">
  <version epoch="0" ver="49" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; - 49-6" date="1654862400">- Release bump, no changes</changelog>
</package>
<package pkgid="ad51294f4578754958069e6dfa5004dfeac949ca6596029f3d81e3b528c7f496" name="inih-debugsource" arch="i686">
  <version epoch="0" ver="49" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; - 49-6" date="1654862400">- Release bump, no changes</changelog>
</package>
<package pkgid="1b6d51041e4eae8a835260f5a19d2c7994fd871c4a548840a59b90450c274854" name="inih-debugsource" arch="x86_64">
  <version epoch="0" ver="49" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 49-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 49-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; - 49-6" date="1654862400">- Release bump, no changes</changelog>
</package>
<package pkgid="b6cbd16fb9cb535fedc30c2bac941fc5b61c904549015e089d0bd9ed61a48a0e" name="initscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.11.8" rel="4.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.6-1" date="1707393600">- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.7-1" date="1709726400">- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-1" date="1724760000">- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- sync spec with c9s</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-2" date="1724760001">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-3" date="1724932800">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-4" date="1725278400">- version bump</changelog>
</package>
<package pkgid="6ff95a5f08390af7a6a8f9503c4aa3a930247dcb1f68bd26db2eeb4d923e5e8c" name="initscripts-debugsource" arch="x86_64">
  <version epoch="0" ver="10.11.8" rel="4.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.6-1" date="1707393600">- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.7-1" date="1709726400">- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-1" date="1724760000">- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- sync spec with c9s</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-2" date="1724760001">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-3" date="1724932800">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-4" date="1725278400">- version bump</changelog>
</package>
<package pkgid="060c80917e3ea25147e58a1171ad8023d6ede144030aba22a72e5d08a7d64069" name="initscripts-rename-device-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.11.8" rel="4.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.6-1" date="1707393600">- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.7-1" date="1709726400">- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-1" date="1724760000">- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- sync spec with c9s</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-2" date="1724760001">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-3" date="1724932800">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-4" date="1725278400">- version bump</changelog>
</package>
<package pkgid="9e9e1b5827ae04dbdc75f1795568d46080724f1de1f9b78c991685c5a366b5a2" name="integritysetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="99f64940d2387d75bf03af0e628ad047c96f0637517c480276ba6c46149fe8f1" name="ipcalc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="5.el9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 0.3.0-1" date="1574510400">- Updated to 0.3.0</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 0.4.0-1" date="1577534400">- Updated to 0.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 0.4.1-1" date="1587729600">- Updated to 0.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 1.0.0-1" date="1601726400">- Updated to 1.0.0</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 1.0.0-2" date="1606132800">- Rebuilt for ronn successor</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2518b2fe10df43a02c483265016de751e002a39b3d37a90aa6f53f2b155239ae" name="ipcalc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="5.el9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 0.3.0-1" date="1574510400">- Updated to 0.3.0</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 0.4.0-1" date="1577534400">- Updated to 0.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 0.4.1-1" date="1587729600">- Updated to 0.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 1.0.0-1" date="1601726400">- Updated to 1.0.0</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 1.0.0-2" date="1606132800">- Rebuilt for ronn successor</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cd0ea8484b6866361c21c527f0898270301634f3130a441b13d1d489101aecd6" name="iproute-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734004800">- iproute-6.11.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743422402">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-5" date="1743595200">- image-mode: double test duration</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el9</changelog>
</package>
<package pkgid="f6c04104a04d37303b7cca5f8b06ef3aa85e522dc15ede1bb3308d820509e434" name="iproute-debugsource" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734004800">- iproute-6.11.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743422402">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-5" date="1743595200">- image-mode: double test duration</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el9</changelog>
</package>
<package pkgid="deb429047f395573b7bc58c140857f9f41bd45ed26f0c0565895518ea34451d1" name="iproute-tc-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734004800">- iproute-6.11.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743422402">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-5" date="1743595200">- image-mode: double test duration</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el9</changelog>
</package>
<package pkgid="caed5146907f495cafcf7f92b9ec4e90c75da34a57555decbe28062a9e78302d" name="iprutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.17.1-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.4.19-1" date="1594296000">- rebase to 2.4.19</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.19-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.19-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.19-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.19-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="637d9f8f7469a61dd1d40090d98b2f000b35659d7c99fe37da33b3274828c4ae" name="iprutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.17.1-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.4.19-1" date="1594296000">- rebase to 2.4.19</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.19-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.19-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.19-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.19-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1982485969affaf43ff263a13a44ed286af53f417056de49a2d4628d3f3e0c1d" name="ipset-debuginfo" arch="i686">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="c8bf6ad29c3fdd290c0dc5587f48897057b954aff27e67f33169bfa4011ebd2b" name="ipset-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="c5382c4f035cb4b9c6e4de00dd0f46a2887942e94cc5d2bf2489b0efdb8ab08f" name="ipset-debugsource" arch="i686">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="15b9993465ff052aa14eca0dda410b598f4ba9411f2328149f1e959ac2487a7f" name="ipset-debugsource" arch="x86_64">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="5f1a69f3255a6d54ea477bd0c05902db160db56b723e49d1af25bd7e42d098f8" name="ipset-libs-debuginfo" arch="i686">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="097c19740421edc9921d3fbe5c629166113e5e8656f194c34532b14b5cd2a51c" name="ipset-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="e2df92b05f54601bc7c1cf575e6bf0e84bc87ce537cf53c61c7b155d23819a74" name="iptables-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="bc703680ebacf5fd83cee318b331ba125e1b2a0b63633108dc34961ae908a573" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="3a73283b16379a9edae7e2f25c99802d05a5eb2d99192ebe1c35e81e36d80f87" name="iptables-debugsource" arch="i686">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="bf6a7a5e008471fcda12bcd75d0c29ca9dd7e26ac3549f27f5bf609bb756d4ff" name="iptables-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="8df17dadb5e0d99778085c0fb989d92286220a99bbadbaf27b608e608271cc6e" name="iptables-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="f653eaa8373121bddeb0697b88378570ce6dd0f54ed7125a268e28c4048f95d5" name="iptables-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="68e817f95b0ffa094fb9e714b135d55a07e7de271880d71ab03a8b9bc05473c4" name="iptables-nft-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="ce1629c9bf868e3fb362c069edb8b3cccc5881209dd8a9872f46d7966a937193" name="iptables-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="50b420b8470c8abfae357285d6daad638f2d2206381c7d0812ba1816067862eb" name="iptraf-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 1.2.2-1.el9" date="1738497600">- New version 1.2.2 (Andrea Claudi) [RHEL-77280]
- Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]</changelog>
</package>
<package pkgid="d7b8e2e4490fcfa8a844d07ea9569c2f2e463537ab3ffdb12d0e0c55ab9c0b4e" name="iptraf-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 1.2.2-1.el9" date="1738497600">- New version 1.2.2 (Andrea Claudi) [RHEL-77280]
- Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]</changelog>
</package>
<package pkgid="3b98444a47f8eb4e7f10faf0faa392749844199f7faec2116e8e76d1549da309" name="iputils-debuginfo" arch="x86_64">
  <version epoch="0" ver="20210202" rel="15.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-10" date="1724846400">- arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
- arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
- ping: Print reply with wrong source with warning &amp; some follow-up fixes (RHEL-12789, RHEL-13480)
- ping: Fix socket error reporting (RHEL-4608)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-11" date="1725624000">- ping: Fix ping6 binding to VRF and address (RHEL-57734)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-12" date="1748952000">- Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-13" date="1750334400">- Fix ping hangs under ASan on aarch64 (RHEL-96871)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-14" date="1750420800">- arping: Fix exit code if receive more replies than sent (RHEL-98281)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-15" date="1757678400">- Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112000)</changelog>
</package>
<package pkgid="2380ac4ad0a88d1f9115d0463e71cdd52cf2e2910e9e8efdba13619bd3df1f81" name="iputils-debugsource" arch="x86_64">
  <version epoch="0" ver="20210202" rel="15.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-10" date="1724846400">- arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
- arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
- ping: Print reply with wrong source with warning &amp; some follow-up fixes (RHEL-12789, RHEL-13480)
- ping: Fix socket error reporting (RHEL-4608)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-11" date="1725624000">- ping: Fix ping6 binding to VRF and address (RHEL-57734)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-12" date="1748952000">- Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-13" date="1750334400">- Fix ping hangs under ASan on aarch64 (RHEL-96871)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-14" date="1750420800">- arping: Fix exit code if receive more replies than sent (RHEL-98281)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-15" date="1757678400">- Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112000)</changelog>
</package>
<package pkgid="104821f7ef9f207e40cab235ea1e5eafa331037277657bb5d13f97e28fb24cf7" name="irqbalance-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.9.4" rel="5.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-1" date="1714564800">- Rebase to upstream commit (f2c8309a41)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-2" date="1730894400">- Release 1.9.4-2
- Rebase to upstream commit (b4b6f194da)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-3" date="1741608000">- Rebase to upstream commit (be5e3b8db2)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-4" date="1747224000">- Rebase to upstream commit (d913f60d84)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-5" date="1759233600">- Rebase to upstream commit (8e8945e509)</changelog>
</package>
<package pkgid="62b8f52d37f8861d703aedb6b4dcd4dec2fd63f5997842a703322294c066ee19" name="irqbalance-debugsource" arch="x86_64">
  <version epoch="2" ver="1.9.4" rel="5.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-1" date="1714564800">- Rebase to upstream commit (f2c8309a41)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-2" date="1730894400">- Release 1.9.4-2
- Rebase to upstream commit (b4b6f194da)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-3" date="1741608000">- Rebase to upstream commit (be5e3b8db2)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-4" date="1747224000">- Rebase to upstream commit (d913f60d84)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-5" date="1759233600">- Rebase to upstream commit (8e8945e509)</changelog>
</package>
<package pkgid="a6023804036e1a8aeab36b340a4421839b485f07c2bcfdc595a887ecb477dd92" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
- new meson build system, sync with fedora packaging</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="fca2cf75fd34a50ada1ed8191af1b52040be561be4e537f6f14352f1a44551ca" name="iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
- new meson build system, sync with fedora packaging</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="8f316270a971da104d9232c4071a68a4211f01cb5d05050a71103c99eecf8c1a" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="d95141332951689e2121ec1b6c035282799fa8e650e7e32f43d98cf9c5b510e3" name="iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="4ce04668e94be410b7000ad3920a67f734a72110eac6509ccab4bf092b32be69" name="iscsi-initiator-utils-debugsource" arch="i686">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
- new meson build system, sync with fedora packaging</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="021081cb39eb1278bd0423ba8b2d4f03704510ebbe248cbea38c5cc52814e54c" name="iscsi-initiator-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
- new meson build system, sync with fedora packaging</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="16eae1a0f5269700785a995cd6ae6429083eeea36db2a1f07910bcfcc0d004a4" name="iscsi-initiator-utils-debugsource" arch="i686">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="4a4095511f445e85b17c0a4a7a9650293b35e1bfe1064865fdaece686fc33aa0" name="iscsi-initiator-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="f2cf58b28caadaef2fd47e8b9376345ee4692ee6852d622d027f12f3e4566388" name="iscsi-initiator-utils-iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
- new meson build system, sync with fedora packaging</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="4385460d32c2cc2aaed274e8376297baab2d9f03a721a098fb74c83dea4d4468" name="iscsi-initiator-utils-iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="2a156b917447510ab60608aa069e009f57f17477217d7dbc2f5c74688d0b7a57" name="isns-utils-debuginfo" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="462d079179e5148c20ed2b95e51f86011d280b955f545aa866b3bbe66363f488" name="isns-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="8a239cc89032310cfbf4bc3c912f395418bcc22492181ac6bd68229534e865e9" name="isns-utils-debuginfo" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="90f23f94ffd401b6b7b33b84afe8cce6a64ab0b93f0ea68fdecb81419b811d11" name="isns-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="86ffef7e79fd585715b8e92327ac8d629faa7b1d5f4af01cf3ff71ed67b2f08e" name="isns-utils-debugsource" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="7a52e545bb2d586718424640a649e53e12260c56d59716c1a1689fad8f039cd7" name="isns-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="3a391e4fb7529d345e96fd982e3e6da7ce242306afd8f2ff0b98a6bc74ab9e7e" name="isns-utils-debugsource" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="5d444b8725fa11bc0e5cbb6f93831dd098342e51b4f33b7528ecd143c2097122" name="isns-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="2bdfe82f42597aaf47de00d231d8691b21a6f838616c4f4766ecd188a1adf9a5" name="isns-utils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="3fa23e69433f85e55dc2b2be3c82605a73094e84e0e206e895b4bfa7e820c8de" name="isns-utils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="6ee811e4e079ca8623425b32785707c18119dd87c8c9ab978058fe972c24d816" name="isns-utils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="d5c5b0ae08dba26f3985e5fe8e8eadfbcac4522a22dd2a5aef54d2d96f05bfec" name="isns-utils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="7ff6ac6f0e7fb2ec0ca63ded0c7cce166a5d6d57d0cf8c1b08a9ce9bd9453d72" name="iw-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17" rel="1.el9"/>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.7" date="1706184000">- Update to 6.7 from upstream
  Resolves: RHEL-22657</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.9" date="1716292800">- Update to 6.9 from upstream
  Resolves: RHEL-37546</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.17.1" date="1764158400">- Update to 6.17 from upstream
  Resolves: RHEL-127107</changelog>
</package>
<package pkgid="87b6325c19b2918a15caf486797b224284e7399947ff46d484389b00f0314422" name="iw-debugsource" arch="x86_64">
  <version epoch="0" ver="6.17" rel="1.el9"/>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.7" date="1706184000">- Update to 6.7 from upstream
  Resolves: RHEL-22657</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.9" date="1716292800">- Update to 6.9 from upstream
  Resolves: RHEL-37546</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.17.1" date="1764158400">- Update to 6.17 from upstream
  Resolves: RHEL-127107</changelog>
</package>
<package pkgid="2e7ed13fb6c8d9324dde03c28fb91d7300b436f89a2ffe5542db4db207726227" name="iwpmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="612defb9bbd16635811f2a5909f782d4d48e9c7288cc090d7fad5a16e4e01dae" name="jansson-debuginfo" arch="i686">
  <version epoch="0" ver="2.14" rel="1.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-7" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.13.1-1" date="1598270400">- Update to 2.13.1 (#1831402)
- Fix docs build failures with Sphinx 3 (#1823532)
- Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1636977600">- Rebase to 2.14
  Related: rhbz#2001066</changelog>
</package>
<package pkgid="dbaa5d6d9f970d8d742440d41906f4c6b36d210cb48984b1fa337f2dc1a68455" name="jansson-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.14" rel="1.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-7" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.13.1-1" date="1598270400">- Update to 2.13.1 (#1831402)
- Fix docs build failures with Sphinx 3 (#1823532)
- Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1636977600">- Rebase to 2.14
  Related: rhbz#2001066</changelog>
</package>
<package pkgid="1a5d9d97d8fecd102118f1add1b1ab5b3381f9f802150d3b9f457648242a76e2" name="jansson-debugsource" arch="i686">
  <version epoch="0" ver="2.14" rel="1.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-7" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.13.1-1" date="1598270400">- Update to 2.13.1 (#1831402)
- Fix docs build failures with Sphinx 3 (#1823532)
- Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1636977600">- Rebase to 2.14
  Related: rhbz#2001066</changelog>
</package>
<package pkgid="e59f8aa0a2268aa04470a83bd1069d7e04c22254c576d52fef44bfb55d2d8444" name="jansson-debugsource" arch="x86_64">
  <version epoch="0" ver="2.14" rel="1.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-7" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.13.1-1" date="1598270400">- Update to 2.13.1 (#1831402)
- Fix docs build failures with Sphinx 3 (#1823532)
- Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1636977600">- Rebase to 2.14
  Related: rhbz#2001066</changelog>
</package>
<package pkgid="59f3d85801678373e841ec354daecbf8498b30352a75b61992e066a006a899a5" name="jitterentropy-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el9"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.4.1-2" date="1672142400">- Update to the upstream v3.4.1 @ 7bf9f85d (bz 2140043)
- Fix a stack corruption on s390x</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-1" date="1707307200">- Update to the upstream v3.5.0 @ b178ef6b (RHEL-30957)
- Use proper SPDX license identifiers</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.6.0-1" date="1729857600">- Update to the upstream v3.6.0 @ 11829386 (RHEL-64947)</changelog>
</package>
<package pkgid="af1430e0c49633f67dd2b055071d9916880cb7f12c8355b12f0d3558873e79d2" name="jitterentropy-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="1.el9"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.4.1-2" date="1672142400">- Update to the upstream v3.4.1 @ 7bf9f85d (bz 2140043)
- Fix a stack corruption on s390x</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-1" date="1707307200">- Update to the upstream v3.5.0 @ b178ef6b (RHEL-30957)
- Use proper SPDX license identifiers</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.6.0-1" date="1729857600">- Update to the upstream v3.6.0 @ 11829386 (RHEL-64947)</changelog>
</package>
<package pkgid="ea357058874ad53be03759b1ec8997b9af2b632cd913e847671f9573971c6959" name="jitterentropy-debugsource" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el9"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.4.1-2" date="1672142400">- Update to the upstream v3.4.1 @ 7bf9f85d (bz 2140043)
- Fix a stack corruption on s390x</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-1" date="1707307200">- Update to the upstream v3.5.0 @ b178ef6b (RHEL-30957)
- Use proper SPDX license identifiers</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.6.0-1" date="1729857600">- Update to the upstream v3.6.0 @ 11829386 (RHEL-64947)</changelog>
</package>
<package pkgid="a34062df1a3e1023058c10ac11a45ed493967083e7577e820cc5c88e8910a777" name="jitterentropy-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="1.el9"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.4.1-2" date="1672142400">- Update to the upstream v3.4.1 @ 7bf9f85d (bz 2140043)
- Fix a stack corruption on s390x</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-1" date="1707307200">- Update to the upstream v3.5.0 @ b178ef6b (RHEL-30957)
- Use proper SPDX license identifiers</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.6.0-1" date="1729857600">- Update to the upstream v3.6.0 @ 11829386 (RHEL-64947)</changelog>
</package>
<package pkgid="afe967bda9ec190670bbc2cf651007c1f19b80ed314cadfe974b282ee52bcc8d" name="jq-debuginfo" arch="i686">
  <version epoch="0" ver="1.6" rel="19.el9_8.2"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-17" date="1714737600">- Fix SAST findings in jq 1.6
- Resolves: RHEL-28653</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-18" date="1748952000">- Fix CVE-2024-23337
- Resolves: RHEL-92975</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19" date="1750334400">- Fix CVE-2025-48060
- Resolves: RHEL-92993</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.1" date="1776945600">- Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()
- Resolves: RHEL-168202</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.2" date="1776945601">- Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions
- Resolves: RHEL-168185</changelog>
</package>
<package pkgid="bf0b8fb311743f37d6535d52a4448b6b390a83824679aa8779c9cd595e464617" name="jq-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6" rel="19.el9_8.2"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-17" date="1714737600">- Fix SAST findings in jq 1.6
- Resolves: RHEL-28653</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-18" date="1748952000">- Fix CVE-2024-23337
- Resolves: RHEL-92975</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19" date="1750334400">- Fix CVE-2025-48060
- Resolves: RHEL-92993</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.1" date="1776945600">- Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()
- Resolves: RHEL-168202</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.2" date="1776945601">- Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions
- Resolves: RHEL-168185</changelog>
</package>
<package pkgid="6b3c545d1b830aa86bf14265be950145c2f1740adb76f45af434290f554621c0" name="jq-debugsource" arch="i686">
  <version epoch="0" ver="1.6" rel="19.el9_8.2"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-17" date="1714737600">- Fix SAST findings in jq 1.6
- Resolves: RHEL-28653</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-18" date="1748952000">- Fix CVE-2024-23337
- Resolves: RHEL-92975</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19" date="1750334400">- Fix CVE-2025-48060
- Resolves: RHEL-92993</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.1" date="1776945600">- Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()
- Resolves: RHEL-168202</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.2" date="1776945601">- Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions
- Resolves: RHEL-168185</changelog>
</package>
<package pkgid="ffe3ae4ea2195f6eecfd345f7f4e51ad3fe33bdf9b2030264de2f73392cec0c6" name="jq-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6" rel="19.el9_8.2"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-17" date="1714737600">- Fix SAST findings in jq 1.6
- Resolves: RHEL-28653</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-18" date="1748952000">- Fix CVE-2024-23337
- Resolves: RHEL-92975</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19" date="1750334400">- Fix CVE-2025-48060
- Resolves: RHEL-92993</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.1" date="1776945600">- Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()
- Resolves: RHEL-168202</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.6-19.2" date="1776945601">- Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions
- Resolves: RHEL-168185</changelog>
</package>
<package pkgid="4fd205ebe5ede536777abdeee5c8db7c41dd40d321b84978a96da86aacc52564" name="json-c-debuginfo" arch="i686">
  <version epoch="0" ver="0.14" rel="11.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-2" date="1589112000">- Add a patch to backport fixes applied on upstream master branch
- Re-enable RDRAND as json-c can detect broken implementations in CPUs now
- Disable -Werror during build</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-3" date="1589198400">- Add upstream patch fixing usage of errno in json_parse_uint64()</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-4" date="1589803200">- Add a patch to fix a test
- Add a patch to fix generation of user-documentation</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-5" date="1590408000">- Run the testssuite with valgrind on %valgrind_arches</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-6" date="1590494400">- Build using Ninja instead of Make
- Add a patch to move Doxyfile into doc subdir
- Remove pre-built html documentation
- Update Doxyfile during %prep
- Add a patch to apply some optimizations to arraylist
- Hardlink the files in %_pkgdocdir</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-7" date="1595851200">- Use new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.14-11" date="1631620800">- Start providing versioned symbols
- Resolves: rhbz#2001067</changelog>
</package>
<package pkgid="02a58f4d07e4ee5c2eb473519f0c6aedf2b6fdb8b34f26ec0152b52087970838" name="json-c-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.14" rel="11.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-2" date="1589112000">- Add a patch to backport fixes applied on upstream master branch
- Re-enable RDRAND as json-c can detect broken implementations in CPUs now
- Disable -Werror during build</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-3" date="1589198400">- Add upstream patch fixing usage of errno in json_parse_uint64()</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-4" date="1589803200">- Add a patch to fix a test
- Add a patch to fix generation of user-documentation</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-5" date="1590408000">- Run the testssuite with valgrind on %valgrind_arches</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-6" date="1590494400">- Build using Ninja instead of Make
- Add a patch to move Doxyfile into doc subdir
- Remove pre-built html documentation
- Update Doxyfile during %prep
- Add a patch to apply some optimizations to arraylist
- Hardlink the files in %_pkgdocdir</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-7" date="1595851200">- Use new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.14-11" date="1631620800">- Start providing versioned symbols
- Resolves: rhbz#2001067</changelog>
</package>
<package pkgid="215209d88cada2a68a8b329d96ed0ccd6c0b909c139c740c6125992a8310397a" name="json-c-debugsource" arch="i686">
  <version epoch="0" ver="0.14" rel="11.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-2" date="1589112000">- Add a patch to backport fixes applied on upstream master branch
- Re-enable RDRAND as json-c can detect broken implementations in CPUs now
- Disable -Werror during build</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-3" date="1589198400">- Add upstream patch fixing usage of errno in json_parse_uint64()</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-4" date="1589803200">- Add a patch to fix a test
- Add a patch to fix generation of user-documentation</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-5" date="1590408000">- Run the testssuite with valgrind on %valgrind_arches</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-6" date="1590494400">- Build using Ninja instead of Make
- Add a patch to move Doxyfile into doc subdir
- Remove pre-built html documentation
- Update Doxyfile during %prep
- Add a patch to apply some optimizations to arraylist
- Hardlink the files in %_pkgdocdir</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-7" date="1595851200">- Use new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.14-11" date="1631620800">- Start providing versioned symbols
- Resolves: rhbz#2001067</changelog>
</package>
<package pkgid="d42d8a7a4bf9ad96a5bf8da8f81baca3916cc43e5d891fcfb48570924984ceb7" name="json-c-debugsource" arch="x86_64">
  <version epoch="0" ver="0.14" rel="11.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-2" date="1589112000">- Add a patch to backport fixes applied on upstream master branch
- Re-enable RDRAND as json-c can detect broken implementations in CPUs now
- Disable -Werror during build</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-3" date="1589198400">- Add upstream patch fixing usage of errno in json_parse_uint64()</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-4" date="1589803200">- Add a patch to fix a test
- Add a patch to fix generation of user-documentation</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-5" date="1590408000">- Run the testssuite with valgrind on %valgrind_arches</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-6" date="1590494400">- Build using Ninja instead of Make
- Add a patch to move Doxyfile into doc subdir
- Remove pre-built html documentation
- Update Doxyfile during %prep
- Add a patch to apply some optimizations to arraylist
- Hardlink the files in %_pkgdocdir</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.14-7" date="1595851200">- Use new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.14-11" date="1631620800">- Start providing versioned symbols
- Resolves: rhbz#2001067</changelog>
</package>
<package pkgid="0567a54c2c5969813c96f03a0d65cf2b509f0c06afda6b89404c76730480b2b0" name="json-glib-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.6" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.5.2-1" date="1598270400">- Update to 1.5.2</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.0-1" date="1599825600">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.6.2-1" date="1612872000">- Update to 1.6.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.4-1" date="1629288000">- Update to 1.6.4</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.6-1" date="1629806400">- Update to 1.6.6</changelog>
</package>
<package pkgid="efae123cab7addefa8c574000394a5a481a4030c2d3d2209452a17de010fc84a" name="json-glib-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.6" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.5.2-1" date="1598270400">- Update to 1.5.2</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.0-1" date="1599825600">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.6.2-1" date="1612872000">- Update to 1.6.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.4-1" date="1629288000">- Update to 1.6.4</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.6-1" date="1629806400">- Update to 1.6.6</changelog>
</package>
<package pkgid="27e6a2b7c34cf0175db8c29eb01b382da35e042a3527ba9fb0db6ea014434277" name="json-glib-debugsource" arch="i686">
  <version epoch="0" ver="1.6.6" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.5.2-1" date="1598270400">- Update to 1.5.2</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.0-1" date="1599825600">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.6.2-1" date="1612872000">- Update to 1.6.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.4-1" date="1629288000">- Update to 1.6.4</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.6-1" date="1629806400">- Update to 1.6.6</changelog>
</package>
<package pkgid="843c666fa94413c1cfb7082e5e8ebbd58bccbc0dded42f32d701d0961523738b" name="json-glib-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.6" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.5.2-1" date="1598270400">- Update to 1.5.2</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.0-1" date="1599825600">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.6.2-1" date="1612872000">- Update to 1.6.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.4-1" date="1629288000">- Update to 1.6.4</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.6-1" date="1629806400">- Update to 1.6.6</changelog>
</package>
<package pkgid="2a4fc38663b3385a936c7962bf7c38e2d528d4e695be77370a6740855cba1af6" name="kbd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-9" date="1681732800">- Require kbd-legacy in main kbd package again
  Resolves: #2139165</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-10" date="1716292800">- Initialize variable to avoid possible uninitialized use
  Resolves: RHEL-31795</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-11" date="1736424000">- Add vlock option to issue prompt before invokation of pam stack
  Resolves: RHEL-57034</changelog>
</package>
<package pkgid="ee7f51acaf81cbcbf806512ef99104bf58cf5928238731bd0aff620be878b870" name="kbd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="12.el9_8"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-11" date="1736424000">- Add vlock option to issue prompt before invokation of pam stack
  Resolves: RHEL-57034</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.0-12" date="1786449600">- Fix CVE-2026-72693: openvt -u process matching made more conservative
  Resolves: RHEL-235988</changelog>
</package>
<package pkgid="aeb00c7456147322be9e3a519bff2e5e9fe0c626961bcf6e48452bbe25ebca3c" name="kbd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-9" date="1681732800">- Require kbd-legacy in main kbd package again
  Resolves: #2139165</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-10" date="1716292800">- Initialize variable to avoid possible uninitialized use
  Resolves: RHEL-31795</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-11" date="1736424000">- Add vlock option to issue prompt before invokation of pam stack
  Resolves: RHEL-57034</changelog>
</package>
<package pkgid="5b604342a646180d6182ed7b70a483c3b9cb5b56d018b8ed52cfd6cdfa0fec74" name="kbd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="12.el9_8"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.4.0-11" date="1736424000">- Add vlock option to issue prompt before invokation of pam stack
  Resolves: RHEL-57034</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.0-12" date="1786449600">- Fix CVE-2026-72693: openvt -u process matching made more conservative
  Resolves: RHEL-235988</changelog>
</package>
<package pkgid="33dcb78737250ab16bfacbb62eaa0c954318a08ba8ca926d2891e9fd55ad71ae" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.10.1" date="1779278400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 5.14.0-687.10.1.0.1" date="1779537600">- Bump release for rebuild with updated rocky-sb-certs</changelog>
</package>
<package pkgid="b4db25df18b4735c9d477c9ef2aa0412defdf534c7d863f6d76b4f39cdaf310a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="185c4d00882cf4da256318b9c7a8503376f812fb2342d17fcff570da6bf3a65b" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="4d970eaf9afa778a6ff5dd258d15c7cfeb932066b196c1d961f164e2a2d95eec" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="6023a22206cf614c2bcad6b7f3bd688edb9c9a37a261bb4c970959df47b8868d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.22.1" date="1783339201">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="2b55ef48fd2bd217631d046e1b2541f3ca6addc56027ef65b1c5e820684d1d02" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="75ecfc998b9b11f225d9c53e95ba8f24ee48e2caf808cd6662c575930ab768c6" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="e998dca97ab41edde79528797e974a5dbb73038cb30cae34b7f8aa630cb7fba4" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="8b6e5824b53e7b96712e6c2034523b282d345a7e8cc07aed6f78f627ed6f1647" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.29.1" date="1784721600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="893eef89d129a2936c03b746a43d39f9d2e547a38e108ded3fed031e0216372b" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="f73276cd05251e1a4d1b79eb93e048f54227142c38d9530245cdc5744c736383" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="60246c7058466428da5adae79b7619519bdee065d7e50e38266bcfbea3e11f02" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="04b9108e2ec1ae54305721db19efd4614edf615a3734caba8fab8c1b037c95bc" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="f27f9b8d898eca612aead1ccb8fc22d7da1c71f371681b0eb9349e8c75471e14" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="ad5121aaff0b36b0b310e1cc7f326c317108d19328b732996e7714de42b56bd4" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.38.1" date="1786449600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="7e0371494dc804ffc7e5b2a8c2331fcb07e8b2562a6f7697eee91f04b0398c02" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="83582c3f483d551248b56f1e80b10db1aec87353ed73ac1ab37f832fe7f87b9c" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.41.1" date="1787227200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="4d01ef06abc53f22753ccc8d1c66f2aa576d1861ffcbc7cba60850f0e13078ae" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.42.1" date="1787745600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="485c679d9d629f663732307a37ee2757e030a73fd3f144db0739d8d29235c3ee" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.44.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.43.1.el9_8]" date="1788177600">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887}
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130}
- sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496]
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304}
- tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940]
- tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940]
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387}
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.44.1.el9_8]" date="1788264000">- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069}
- locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684]
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808}
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.44.1" date="1788523200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="a3c8902e7c5aa38fa2ba12610ccc82436f8dca0bb0734070ab426e724f5c282e" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.10.1" date="1779278400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 5.14.0-687.10.1.0.1" date="1779537600">- Bump release for rebuild with updated rocky-sb-certs</changelog>
</package>
<package pkgid="09c44655e876ae452fcfabb0aefd6e52856a303e36f3477f091a443fc7b9145d" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="6c68b048c326863814c9fce5d7b560dda461a26ea53f82d6ac2aa38c5791027a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="194caf33fa7fdb2258bc076708940d0ba766fdd2d03817db6b6d286e579cf8bb" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="bc6153fcccdf10955359bdac29c7483740fc49d8c32a96939b47eb70587ff47c" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.22.1" date="1783339201">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="d79850de9ba216c9920784564713e36162d279d2b4875f946a411bf36effee8a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="848af9f48aecc4b9ddc1275612a48c9691cf66973009d395ed19538379f602dc" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="a66c88ecf09ce9f50225aa1aa62cc9752b45d0e43a6303ff53b352058d02624f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="7ba47860b8a09c22b7fda0d4be5dc94494415ea9cf78db12146daf7bfbe3eb39" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.29.1" date="1784721600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="38c0ef4020ad210e209fab1775f244776947902ca0229071e6e2b6a4f632c80f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="d8d94a4233495f439852b3529dfc4fa84e5121012d5c6eeccc515fca4f819200" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="5b1f5263dfd3494f17d783b3792000a4c89b232d27d294dc225a7c138ea9a65b" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="4c9f92ac4851bc8bf95474d4a02b0862386e6587ff6fdc24d263a2223e166006" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="e46f43f577638d0657ae76de690ede6ae2935192ea848127b1cf20010d1597e4" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="48a31dacf99f23bfb46cd4dd5a27eb2019c780d7cf9770ec575373329fbddedd" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.38.1" date="1786449600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="32d8bf60af14e31d0fee3e08a1fd184090e74bb67460d05cdacd69d338c4fb47" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="8983106e838a183a7512bf1d9c818bec16a676a9602939c65a0c00c66eb03fb6" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.41.1" date="1787227200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="006a40b80feb60ce22a93f4eee44783f5280529a3e7489fa047a377a51365679" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.42.1" date="1787745600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="f9397cc3af4167b9587e561101c53e05952991fb19807e3f40fe18a28abec1d0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.44.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.43.1.el9_8]" date="1788177600">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887}
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130}
- sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496]
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304}
- tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940]
- tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940]
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387}
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.44.1.el9_8]" date="1788264000">- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069}
- locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684]
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808}
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.44.1" date="1788523200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="e6a46622ef9a5373b302370f53aa83ed22b3ffe8726c9a7e725608e8a4de2369" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.10.1" date="1779278400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 5.14.0-687.10.1.0.1" date="1779537600">- Bump release for rebuild with updated rocky-sb-certs</changelog>
</package>
<package pkgid="8ce1942dfd04c3818428eb7c9f008e02875b2d450e5f343330e7eb4349f51e94" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="93509a91ad173b6e96ccefdd39e376b95eca9324cbba745c7e9083e3f3fe86fd" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="fe663e81ae660df0ab6f1a33385f7cd5f0e080b4644b64aecc2b3b6c34d7d91d" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="def4bfd2c3771a38f0b67c6f8e850b85d1f747627c3f3bbe178a016adc2f0394" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.22.1" date="1783339201">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="9de8bb20867719bad42c88fdbc42555d0afa54bc0e6a709a80add150f23e7872" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="19b68b6367134c651a10fe593fc39500d7ec048afa56ebdfef8cb8b14d81c9d6" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="5de331b86830ed282542c1bc95e8fbf8297696ef0ff7aedd6ce7d89eb960a947" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="5701e10957ce2916e9f20324615ed597ddd2f3da11884d43c507f0caabf7a293" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.29.1" date="1784721600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="f0a3db742ae20891cf7f8c16f7118a185484c0888a5338517efcd4c953122844" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="57d38bb9c17b2761ead43d0c4e6f7b6802a46dddfc9d45d056b95ef8589eb97b" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="6183a636a875ed0913698efb5b0d5198379b0ccca9c75df3c8c58895a5223ebd" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="7e858bfd14ab283900e56d6b245120696fd6d6f52bdaa85130c32acda59565e9" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="7c6aedda0fb10edfe76a7fc0166deb75ccd9601c42a61a07833b91e4ff5a4bed" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="466ef1cc74b83cb0dd7e8b482da86df28749d48ee1fc88198076fcce31face85" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.38.1" date="1786449600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="cb4bc02c3b75c6a24a1463d3c2c84cfdc1c04839c63c1d73e01d890076651492" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="2176c93da2d7555b5a224244123aed22ed52e92a46f4700c5a70518fb9e99cbf" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.41.1" date="1787227200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="056319f49d858eae5bd564200b62fcb041053d11c3555d81f53b32f840cb272e" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.42.1" date="1787745600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="bd561ee8bee87a2795d51fad248ff940dd755e36d5ced802ecc30ca72ea1d8e9" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.44.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.43.1.el9_8]" date="1788177600">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887}
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130}
- sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496]
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304}
- tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940]
- tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940]
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387}
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.44.1.el9_8]" date="1788264000">- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069}
- locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684]
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808}
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.44.1" date="1788523200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="b3e5cc7217d976350c5eded40a66d9c5b5ca4e5a7d74d6546037cf5a39fc73b2" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.10.1" date="1779278400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 5.14.0-687.10.1.0.1" date="1779537600">- Bump release for rebuild with updated rocky-sb-certs</changelog>
</package>
<package pkgid="0d90aa6624a2478424cbb6b3477e716ebc214b243ce203d9a2d384b2ae73d102" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="cb1017617c6c91c9d3001b476f7504472c13840735517b11768c7527651135f6" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="5109c7cf0453ec00b315224654ee7c873babe775b20e0f74de2ae5ffcd7ab720" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="68e38205a9c8e61d2685e45afd6cbbd500ae844cbc676e49ef1f5b6d20b352fe" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.22.1" date="1783339201">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="266a8b2d3cb4ad316f148dda0ab8044111f0d678926210ad20eda51eba3894c8" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="622b7ae611669d7ca1b1561fe9e94e5f2f61434d874fd39195f49b1ea813894c" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="d670d26e623e00b4d7838431e38f484546bb9aed33b840f280fda38f3eb950eb" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="41b1aba3f9219b785a5020e39266e84792b9ca2cf357d3da10377fed114690c0" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.29.1" date="1784721600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="9282974d662ed544e32114decf8fbe8fd5e2df6092c187327b8d68b4c39cb0f2" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="81c30144e9d854c20f2adf254214a5fb8160ce7c8f9d3a4c51bdd096eb523700" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="430f58e2ef1941535c29c957d319995c3cecf196e3c0e07fdb63e22df1001d9a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="0729832eb110ae022e48aa4bb8f3996390b0c9d7d55f79313544859f9e0055c5" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="5c9568649a9178b95849248ead55002937c96aa3d1c317aeda3c5380b7a95ef3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="db0d5c8f49a8d4ccaf7465bdf1730ebf299933da0aa5b91fff2a6def288407a3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.38.1" date="1786449600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="9f53bf9b8c4fe08a29802716b01d8cbe2f43fc048340156846975c022cdd1022" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="9b3bde57a29e246efcc477f76514ad3bf9700f83816fba07de59b9cbea3c98ef" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.41.1" date="1787227200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="e1ce354509c82552b2ecd8d8662c35addfcfb8492aecb06ccf336ba718f762a7" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.42.1" date="1787745600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="925acef02793eb034bd6a800a24d56be27fc7ae407a991d270b280971dc8b090" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.44.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.43.1.el9_8]" date="1788177600">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887}
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130}
- sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496]
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304}
- tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940]
- tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940]
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940]
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387}
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.44.1.el9_8]" date="1788264000">- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069}
- locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684]
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808}
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.44.1" date="1788523200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
</package>
<package pkgid="2c70c0dcfd383c65f468a80c0d37125509d259b4a24eb91309ebb58d2e47e946" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.29" rel="17.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-8" date="1749729600">- kdumpctl: check and generate /etc/vconsole.conf
- kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-9" date="1754049600">- Support dumping to NVMe/TCP configured using NVMe Boot Firmware Table</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-10" date="1754568000">- sysconfig: disable kfence in kdump kernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-11" date="1759492800">- kdumpctl: deprecate --reboot for reset-creashkernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-12" date="1763121600">- Allow "sudo kdumpctl" for LUKS dump target
- Restore SELinux label of crypttab file
- Allow kdump.service to access LUKS volume keys
- Wait for LUKS configfs API to be ready
- Change LUKS volume key prefix to kdump-cryptsetup:vk-
- Remove unused LUKS volume keys from keyring
- Limit LUKS support to x86_64
- Add kdumpctl setup-crypttab subcommand
- Return LUKS devices in the form of UUIDs directly
- Fix SC2181 issues in kdump-udev-throttler
- LUKS: make /usr writable
- Address CPU/memory hot plugging for kdump LUKS support
- shfmt kdump-udev-throttler
- Use cryptsetup --link-vk-to-keyring to save volume keys
- Support dumping to a LUKS-encrypted target
- Add a helper function to get uuid by MAJ:MIN</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-13" date="1765454400">- update 98-kexec rules for crash hotplug</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-14" date="1766491200">- powerpc: Set nr_cpus=16 for kdump kernel
- powerpc: consider CPU count while calculating crashkernel value
- Use all available CPUs to collect dump</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.29-15" date="1768996800">- sysconfig: use initramfs_options to reduce memory usage
- kdump-lib-initramfs: rewrite kdump_get_conf_val
- kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-16" date="1769083200">- kexec-kdump-howto.txt: update paragraphs related to disable_cpu_apicid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-17" date="1770984000">- Fix a data race in multi-threading mode (--num-threads=N)</changelog>
</package>
<package pkgid="b652d7a5345342c110f7ebad89c4f36f594052028b95305e45394548a2f2103b" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.29" rel="17.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-8" date="1749729600">- kdumpctl: check and generate /etc/vconsole.conf
- kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-9" date="1754049600">- Support dumping to NVMe/TCP configured using NVMe Boot Firmware Table</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-10" date="1754568000">- sysconfig: disable kfence in kdump kernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-11" date="1759492800">- kdumpctl: deprecate --reboot for reset-creashkernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-12" date="1763121600">- Allow "sudo kdumpctl" for LUKS dump target
- Restore SELinux label of crypttab file
- Allow kdump.service to access LUKS volume keys
- Wait for LUKS configfs API to be ready
- Change LUKS volume key prefix to kdump-cryptsetup:vk-
- Remove unused LUKS volume keys from keyring
- Limit LUKS support to x86_64
- Add kdumpctl setup-crypttab subcommand
- Return LUKS devices in the form of UUIDs directly
- Fix SC2181 issues in kdump-udev-throttler
- LUKS: make /usr writable
- Address CPU/memory hot plugging for kdump LUKS support
- shfmt kdump-udev-throttler
- Use cryptsetup --link-vk-to-keyring to save volume keys
- Support dumping to a LUKS-encrypted target
- Add a helper function to get uuid by MAJ:MIN</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-13" date="1765454400">- update 98-kexec rules for crash hotplug</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-14" date="1766491200">- powerpc: Set nr_cpus=16 for kdump kernel
- powerpc: consider CPU count while calculating crashkernel value
- Use all available CPUs to collect dump</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.29-15" date="1768996800">- sysconfig: use initramfs_options to reduce memory usage
- kdump-lib-initramfs: rewrite kdump_get_conf_val
- kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-16" date="1769083200">- kexec-kdump-howto.txt: update paragraphs related to disable_cpu_apicid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-17" date="1770984000">- Fix a data race in multi-threading mode (--num-threads=N)</changelog>
</package>
<package pkgid="1f3eaa4ee37e0d2f729ceb913116a480fef3e52e56eb894b1934b93a49422be5" name="keyutils-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.3" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.6.1-1" date="1609848000">- Update to 1.6.1
- Spec cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1665748800">- Update to upstream version 1.6.3
  Related: rhbz#2119105</changelog>
</package>
<package pkgid="cb58788c03ffd52ebf50fcf772a7abd7ea2da15fc1e74959f29da8d6b8e40b4f" name="keyutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.6.1-1" date="1609848000">- Update to 1.6.1
- Spec cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1665748800">- Update to upstream version 1.6.3
  Related: rhbz#2119105</changelog>
</package>
<package pkgid="8b880accb752cb70af78f12823fdaa03dfebca862535c255b84ff339f7dc5024" name="keyutils-debugsource" arch="i686">
  <version epoch="0" ver="1.6.3" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.6.1-1" date="1609848000">- Update to 1.6.1
- Spec cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1665748800">- Update to upstream version 1.6.3
  Related: rhbz#2119105</changelog>
</package>
<package pkgid="14404155ddaedccd47c0018d8fd198cdd1a433db3e17a121dcdb7346b8e1dcf0" name="keyutils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.6.1-1" date="1609848000">- Update to 1.6.1
- Spec cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1665748800">- Update to upstream version 1.6.3
  Related: rhbz#2119105</changelog>
</package>
<package pkgid="276ac4992f6312571b2b2d9a35aa93384a7c4d700f1c945146b9505690ece7a7" name="keyutils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.3" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.6.1-1" date="1609848000">- Update to 1.6.1
- Spec cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1665748800">- Update to upstream version 1.6.3
  Related: rhbz#2119105</changelog>
</package>
<package pkgid="34006589ed2067bf5ea026d9945f14ed90eead9e458886a39e9d2f949c01a327" name="keyutils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.6.1-1" date="1609848000">- Update to 1.6.1
- Spec cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1665748800">- Update to upstream version 1.6.3
  Related: rhbz#2119105</changelog>
</package>
<package pkgid="3107ad48a13ae89dc061c57dbbff584065e946856c8c79adcfbcaa8609de6984" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="28" rel="11.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 28-10" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-34073</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 28-11" date="1755518400">- check weak-updates directory exists before using it
- Resolves: RHEL-106279</changelog>
</package>
<package pkgid="08c6ecb42969faf387d1083c03be96468f921e9e4c767822d95a7f7605a62d7a" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="28" rel="11.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 28-10" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-34073</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 28-11" date="1755518400">- check weak-updates directory exists before using it
- Resolves: RHEL-106279</changelog>
</package>
<package pkgid="a6141ca85ea23c484c8c8f54b5b8cec0eae7cc3c0fd79222c903bed0d11c6632" name="kmod-debugsource" arch="i686">
  <version epoch="0" ver="28" rel="11.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 28-10" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-34073</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 28-11" date="1755518400">- check weak-updates directory exists before using it
- Resolves: RHEL-106279</changelog>
</package>
<package pkgid="0eeb284f0e70a7d1706ba0d4b21649f6971472dc0ad1d9f4d9c4257c7f928ffa" name="kmod-debugsource" arch="x86_64">
  <version epoch="0" ver="28" rel="11.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 28-10" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-34073</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 28-11" date="1755518400">- check weak-updates directory exists before using it
- Resolves: RHEL-106279</changelog>
</package>
<package pkgid="1f98cb99a3fd2401a9787079c07559cb91f9a80bc1460995c1990d0d3049593d" name="kmod-kvdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.2.7.4" rel="189.el9_8"/>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-181.el9" date="1763467200">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-182.el9" date="1764590400">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-183.el9" date="1765195200">- TEMPORARY FIX to correct build failures regarding from_timer error
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-184.el9" date="1765368000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-185.el9" date="1766404800">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-186.el9" date="1767960000">- Replace from_timer with timer_container_of
- Resolves: RHEL-140206</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-187.el9" date="1767960001">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.4-187.el9" date="1770379200">- Remove us_to_ktime definition to resolve kernel conflicts.
- Resolves: RHEL-146745</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-188.el9" date="1771848000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-189.el9" date="1773921600">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
</package>
<package pkgid="0703ebd56b2a579084ceb7365e222f81f5deebe998dff91741e023cf6fcb1b06" name="kmod-kvdo-debugsource" arch="x86_64">
  <version epoch="0" ver="8.2.7.4" rel="189.el9_8"/>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-181.el9" date="1763467200">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-182.el9" date="1764590400">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-183.el9" date="1765195200">- TEMPORARY FIX to correct build failures regarding from_timer error
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-184.el9" date="1765368000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-185.el9" date="1766404800">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-186.el9" date="1767960000">- Replace from_timer with timer_container_of
- Resolves: RHEL-140206</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-187.el9" date="1767960001">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.4-187.el9" date="1770379200">- Remove us_to_ktime definition to resolve kernel conflicts.
- Resolves: RHEL-146745</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-188.el9" date="1771848000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-189.el9" date="1773921600">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
</package>
<package pkgid="22ffd3ee94183f371825ab2d9581356caf05c073e47a355285c1e2587d72c7fb" name="kmod-libs-debuginfo" arch="i686">
  <version epoch="0" ver="28" rel="11.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 28-10" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-34073</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 28-11" date="1755518400">- check weak-updates directory exists before using it
- Resolves: RHEL-106279</changelog>
</package>
<package pkgid="a7575997d10809d52bf62a780937e2cebe68b58bf5fc76c03ae390f1897eab8d" name="kmod-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="28" rel="11.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 28-10" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-34073</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 28-11" date="1755518400">- check weak-updates directory exists before using it
- Resolves: RHEL-106279</changelog>
</package>
<package pkgid="d19d0d6d048e921d774be0361f852a26ad720699c3ab0c00c50e12b0da28f0fe" name="kpartx-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="5887a784b849430e0687d8fe764023e7cbe3237874bbabed3298bded433a423a" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="0ee70d9fbb3d6925d7b2fa8bdc6d53fb5a5ecb74bd3eaf2aa59065c1be44e161" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="c2a6cdef7179a45609e1f4c89c1364920d70033e722e4ae3be56823358e61f8d" name="krb5-debugsource" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="f4dc91dc80d6ad20c1e2739ccd57eb883f671c8fd651f28126301c843614969c" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="590f6e94cab6e1e2bf4f403dbfe0557736a81199ac7ac19e72a71826bd92d421" name="krb5-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="505855482384c737113865aebf12a8f1844aa71cbfdc016beba2067f3e29f699" name="krb5-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="b91dc3ae6a57000bbd9ebda100f3e208de78ea3900aa62e3231c832ad53cb5ef" name="krb5-pkinit-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="fc65d94c0571b3852c8b84e25d6e79b212b3fdc0442061adcab413f37d1aa816" name="krb5-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="8568c5799ed26201a5529106ccece28b1e334c1f9e12199cbfae1a829165c576" name="krb5-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="43abc968ddb123454357830bacfde181bf503a533d814f2ca86d2fd7ef338760" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="68d6fb092fcd7c090715ad8d84729ec0cb1f561e0ad8bf6ddf6095dcfedc338b" name="krb5-server-ldap-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="affd688419d599694ff35e20d73c218f91ca3c7ad6fe922b3c8cc318765f1a88" name="krb5-server-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="7ada8217fe55b51290d03b16e4c510eae135a27275f86d9be8b2ebb923cc3654" name="krb5-workstation-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="d6c4b7875cd8a2fe2ac98fd561bb2664d9b333f8ba7adfa8bc6ba06418b57905" name="krb5-xrealmauthz-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="143e238a741096971f0b4949460ba7f99af3a976ad3276ed1f44b9060e68b74c" name="krb5-xrealmauthz-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="90616b3a6bd088d44e8d72ce53b556ccde51a29e8d76e21037af65e79f9357f0" name="ktls-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.11" rel="3.el9_6"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 0.10-0" date="1709208000">- Initial package
- Upstream contributions by:
    - Chuck Lever &lt;chuck.lever@oracle.com&gt;
    - Hannes Reinecke &lt;hare@suse.de&gt;
    - Jeff Layton &lt;jlayton@kernel.org&gt;
    - Benjamin Coddington &lt;bcodding@redhat.com&gt;
    - David Härdeman &lt;david@hardeman.nu&gt;
    - Tigran Mkrtchyan &lt;tigran.mkrtchyan@desy.de&gt;
    - Moritz "WanzenBug" Wanzenböck &lt;moritz.wanzenboeck@linbit.com&gt;</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 0.11-0" date="1718625600">- Release ktls-utils 0.11 (RHEL-39442)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 0.11-1" date="1738670400">- tlshd: link .nvme default keyring into the session (RHEL-71505)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 0.11-2" date="1739361600">- Bump release to satisfy the errata automation</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 0.11-3" date="1741003200">- tlshd: Pass ETIMEDOUT from gnutls to kernel</changelog>
</package>
<package pkgid="5ce1674338d7800b174db54d90915f599ae5843f248cff0845c2de45b9016893" name="ktls-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="0.11" rel="3.el9_6"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 0.10-0" date="1709208000">- Initial package
- Upstream contributions by:
    - Chuck Lever &lt;chuck.lever@oracle.com&gt;
    - Hannes Reinecke &lt;hare@suse.de&gt;
    - Jeff Layton &lt;jlayton@kernel.org&gt;
    - Benjamin Coddington &lt;bcodding@redhat.com&gt;
    - David Härdeman &lt;david@hardeman.nu&gt;
    - Tigran Mkrtchyan &lt;tigran.mkrtchyan@desy.de&gt;
    - Moritz "WanzenBug" Wanzenböck &lt;moritz.wanzenboeck@linbit.com&gt;</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 0.11-0" date="1718625600">- Release ktls-utils 0.11 (RHEL-39442)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 0.11-1" date="1738670400">- tlshd: link .nvme default keyring into the session (RHEL-71505)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 0.11-2" date="1739361600">- Bump release to satisfy the errata automation</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 0.11-3" date="1741003200">- tlshd: Pass ETIMEDOUT from gnutls to kernel</changelog>
</package>
<package pkgid="73a6b35735ee706d74bae5fc57ee7db852ca0d09d62f42a82609111363ca22b0" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="7c97c64818a70b2bc7b91e1294f8d2b1f5ba8344f432239983d8ef04875bc672" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="2563bdc93eeeb4748fd891af27aa970c5b1ab4e3f00d0037a665c8b9ac56562f" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="94605cb80a076d91f7ef7bc46391c29f9b4f59a6cd12ac36f0db3138d3690258" name="ledmon-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.0" rel="3.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1712923200">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-95751)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-3" date="1753272000">- Bump release (RHEL-95751)</changelog>
</package>
<package pkgid="5041f5c75997823f3f8190191bcb24f01a4ebf81a7044cd3ac3234b5d8a911fa" name="ledmon-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="3.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1712923200">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-95751)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-3" date="1753272000">- Bump release (RHEL-95751)</changelog>
</package>
<package pkgid="744528fd21a6ac2d857b77b6a947677db87ffcaaa9519028d279ba9905d45353" name="ledmon-debugsource" arch="i686">
  <version epoch="0" ver="1.1.0" rel="3.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1712923200">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-95751)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-3" date="1753272000">- Bump release (RHEL-95751)</changelog>
</package>
<package pkgid="ff9afeb45eb864241e07326351ea3a6572b4564a4f6dadf564efcdced839fbf3" name="ledmon-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="3.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1712923200">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-95751)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-3" date="1753272000">- Bump release (RHEL-95751)</changelog>
</package>
<package pkgid="7ea68c420d34594df999862752e4bde4d5fc4c668aaa554c5b2107864b803f70" name="ledmon-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.0" rel="3.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1712923200">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-95751)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-3" date="1753272000">- Bump release (RHEL-95751)</changelog>
</package>
<package pkgid="ed8ca977b9ad6e249f858b0abf7068687ed84d6c99dcc311b9459b217bf3e5d9" name="ledmon-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="3.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1712923200">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-95751)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-3" date="1753272000">- Bump release (RHEL-95751)</changelog>
</package>
<package pkgid="be641e552914c0a43b4b08fafcfab7f64e816eaefc9ed5977fdf2bdb5a3ed710" name="less-debuginfo" arch="x86_64">
  <version epoch="0" ver="590" rel="6.el9"/>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; 590-3" date="1708516800">- Fix CVE-2022-48624
- Resolves: RHEL-26265</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 590-4" date="1722945600">- fix less with LESSOPEN allowing command injection (CVE-2024-32487) (RHEL-32739)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 590-5" date="1722945601">- fix static analysis findings (RHEL-51178)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 590-6" date="1751457600">- fix hyperlink underline continuing on next line (RHEL-31219)</changelog>
</package>
<package pkgid="6f36ef076854a84ba0d0ba95d8b88dbd23fcdc3c4c122c49fb7f8a70a99b9cf6" name="less-debugsource" arch="x86_64">
  <version epoch="0" ver="590" rel="6.el9"/>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; 590-3" date="1708516800">- Fix CVE-2022-48624
- Resolves: RHEL-26265</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 590-4" date="1722945600">- fix less with LESSOPEN allowing command injection (CVE-2024-32487) (RHEL-32739)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 590-5" date="1722945601">- fix static analysis findings (RHEL-51178)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 590-6" date="1751457600">- fix hyperlink underline continuing on next line (RHEL-31219)</changelog>
</package>
<package pkgid="b94b3fa7902e51db5b4f1842dc17ffad97477382b35f98afcc6190334b9c044f" name="libacl-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.1" rel="4.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-4" date="1696593600">- preserve failed setfacl return code (RHEL-11833)</changelog>
</package>
<package pkgid="063e347a1ba3ed0f66fba7a924125163ec5d103d7f7a0aa31d5a20c45d76188c" name="libacl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="4.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-4" date="1696593600">- preserve failed setfacl return code (RHEL-11833)</changelog>
</package>
<package pkgid="6e85d0e5ff337550e1dc1e46f2a618c38ae52be504027e786128ce80d1b37187" name="libacl-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="bbbf6b8318608ca14361baa48be01383c4fc713818668bd0dd8c26a337a836ca" name="libacl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="d22a9c2f11b02e147d10be6fd10c7e06ca071b234985e48e986abeda4f6ceb54" name="libaio-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.111" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.3.111-10" date="1596801600">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1a1eae9e768a4fa5f534bc1b435bcdc0d4f9ddd317bada836e6768942655cc9f" name="libaio-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.111" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.3.111-10" date="1596801600">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="048148b56af251b010192689b75f04a4c31178ec28cce06bde094850b33bb291" name="libaio-debugsource" arch="i686">
  <version epoch="0" ver="0.3.111" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.3.111-10" date="1596801600">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c352e76a901616432ac4d2f3d726adb34a89bd77ada54c9ec81fb95fcd99f93f" name="libaio-debugsource" arch="x86_64">
  <version epoch="0" ver="0.3.111" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.3.111-10" date="1596801600">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.111-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="78d081d0facfa0dd0307d04d84bd765dd3aa13974a7ae18af07220cd0f62065a" name="libarchive-debuginfo" arch="i686">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="21199e9192c9a506bf32266db1d3bde96dbe06c56fd40525af7b8dd5f66cfcf3" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="fbec94bb304afd0415acf7cc18b6042407a8facdff8b78ef473a7639369700c3" name="libarchive-debuginfo" arch="i686">
  <version epoch="0" ver="3.5.3" rel="9.el9_7"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
</package>
<package pkgid="858c06784cfc6edf33ba96b5081c373bbff53d6676db5e597ea810db822ce962" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="9.el9_7"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
</package>
<package pkgid="8fb7d7125c7e9031dc487b657bfef44e0a6f0a09e075dc4a783aa79283ff9322" name="libarchive-debugsource" arch="i686">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="987b23f6102c926c8394a9afa72ac74e95db758e8efee81badcf10a23ef17a37" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="0552ebf8461c97622ce7ad6937bdf8f86c06d85ce23bc0523692a4178227201f" name="libarchive-debugsource" arch="i686">
  <version epoch="0" ver="3.5.3" rel="9.el9_7"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
</package>
<package pkgid="dbb14b807146a2e51b3610e58fd08f0028a7759dfb4272300491c5ccbea53a06" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="9.el9_7"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
</package>
<package pkgid="587bf5ef709662768dadc94344375c21fadb0b1dfc396f602d2fe9d79b538a05" name="libassuan-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.5" rel="3.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 2.5.3-2" date="1566216000">- add includedir to pkg-config --cflags (#1742986)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.4-1" date="1606824000">- New upstream release (#1891067)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.5-1" date="1616414400">- New upstream release (#1941663)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1a8184db9e22dd1fa9caae684e602279b87221b15825b42469341ce7157c5a66" name="libassuan-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="3.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 2.5.3-2" date="1566216000">- add includedir to pkg-config --cflags (#1742986)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.4-1" date="1606824000">- New upstream release (#1891067)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.5-1" date="1616414400">- New upstream release (#1941663)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7399c801170243ddda6327669aa4b1a916fcd518a012368120f3bc5b582ac99e" name="libassuan-debugsource" arch="i686">
  <version epoch="0" ver="2.5.5" rel="3.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 2.5.3-2" date="1566216000">- add includedir to pkg-config --cflags (#1742986)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.4-1" date="1606824000">- New upstream release (#1891067)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.5-1" date="1616414400">- New upstream release (#1941663)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b63356d8a15c7fa981a6fe012fdb3ff59b4e6a2539588150864524a8a89cf675" name="libassuan-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="3.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 2.5.3-2" date="1566216000">- add includedir to pkg-config --cflags (#1742986)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.4-1" date="1606824000">- New upstream release (#1891067)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.5-1" date="1616414400">- New upstream release (#1941663)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.5-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6d1a55e4232b26d58bc293b9dbcd7a35a418d93dc3ac7fc5d46a074118e8902a" name="libatomic-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="dd851273da87ffcb889f88244c42c6364823f56f36015706e25e977da1a7e961" name="libatomic-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="d2b8a61197b521cefaec7ac2249732b243dea67fb1cc369c3e54b5085e45a1b7" name="libattr-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.4.48-9" date="1592827200">- add BR for perl(FileHandle) needed by %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-10" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.0-1" date="1615550400">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.1-1" date="1615896000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="04014513dcc90e2cf0731693bc351c39ac5e2c51a8ad7ab2f4413f3d1ff33ce6" name="libattr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.4.48-9" date="1592827200">- add BR for perl(FileHandle) needed by %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-10" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.48-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.0-1" date="1615550400">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.5.1-1" date="1615896000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5e1ce3ff8d2ecf4be55502007e4ea6cf2c96d402331b052884bfcf4377645aac" name="libattr-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)</changelog>
</package>
<package pkgid="ce55c868a0eb227f84d109254afdd07c2ad050cb83700b61eb0d42b95116e58d" name="libattr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)</changelog>
</package>
<package pkgid="79c3f70e1aa09807fa0e7665c76a2a2da90530491d4a72d262e4a4e6da51a320" name="libbasicobjects-debuginfo" arch="i686">
  <version epoch="0" ver="0.1.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="0d15a9f7753e9936215dab7594cbb52e2a94116f59689dc9c43f0050b1833179" name="libbasicobjects-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="65129a28d975da091cf5e1c6f8ffec33fc1b4d97ed5963a39392449e822f21e1" name="libblkid-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="24e4a7b58ba5e6d33a846ce525eecf48213c7bb2310176635fc96d4b521f1dce" name="libblkid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="a971a081aeadbd59c9d58842e769cbcc68188059f952d02b9ec9c9e3184e0520" name="libbpf-debuginfo" arch="i686">
  <version epoch="2" ver="1.5.0" rel="3.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-1" date="1705406400">- Update to BPF 6.6 rebase (RHEL-10695)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-2" date="1707307200">- Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1720699200">- Update to BPF 6.8 rebase (RHEL-30776)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1738152000">- Update to BPF 6.12 rebase (RHEL-30778)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1752062400">- Update to BPF 6.14 stable backport (RHEL-99685)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-3" date="1764936000">- Update to BPF 6.17 stable backport (RHEL-118560)</changelog>
</package>
<package pkgid="944d73316630517376270d38b560077f1496bfd31c26572f10cd9a625c6f631d" name="libbpf-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.5.0" rel="3.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-1" date="1705406400">- Update to BPF 6.6 rebase (RHEL-10695)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-2" date="1707307200">- Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1720699200">- Update to BPF 6.8 rebase (RHEL-30776)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1738152000">- Update to BPF 6.12 rebase (RHEL-30778)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1752062400">- Update to BPF 6.14 stable backport (RHEL-99685)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-3" date="1764936000">- Update to BPF 6.17 stable backport (RHEL-118560)</changelog>
</package>
<package pkgid="15f234d59dc713fba6e0f475d54c7bd496c03ff29d416d3030b452ac15cb8e15" name="libbpf-debugsource" arch="i686">
  <version epoch="2" ver="1.5.0" rel="3.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-1" date="1705406400">- Update to BPF 6.6 rebase (RHEL-10695)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-2" date="1707307200">- Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1720699200">- Update to BPF 6.8 rebase (RHEL-30776)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1738152000">- Update to BPF 6.12 rebase (RHEL-30778)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1752062400">- Update to BPF 6.14 stable backport (RHEL-99685)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-3" date="1764936000">- Update to BPF 6.17 stable backport (RHEL-118560)</changelog>
</package>
<package pkgid="4f977416b81e179ec7a18b7281470a7abb05a1ca2a41b65badb5e24a4b567f9f" name="libbpf-debugsource" arch="x86_64">
  <version epoch="2" ver="1.5.0" rel="3.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-1" date="1705406400">- Update to BPF 6.6 rebase (RHEL-10695)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-2" date="1707307200">- Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1720699200">- Update to BPF 6.8 rebase (RHEL-30776)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1738152000">- Update to BPF 6.12 rebase (RHEL-30778)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1752062400">- Update to BPF 6.14 stable backport (RHEL-99685)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-3" date="1764936000">- Update to BPF 6.17 stable backport (RHEL-118560)</changelog>
</package>
<package pkgid="6f69b17a17da3fec7195a510a120973f96e43b1ded28f42a2b95655fb7b0d098" name="libbrotli-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="9.el9_7"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-8" date="1768737600">- Resolves: RHEL-133995
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-9" date="1768910400">- Resolves: RHEL-133995
  Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="783609cc9c43c2bcb7f810d78435710bf338d45cbd35429682eee675af3b3cbd" name="libbrotli-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="9.el9_7"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-8" date="1768737600">- Resolves: RHEL-133995
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.9-9" date="1768910400">- Resolves: RHEL-133995
  Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="4140965f5c8ad4b9edd7ef099d9fb8a60f2122756d2c79d17b0338f6a07e1971" name="libcap-debuginfo" arch="i686">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="3c738e1fa5a6b19b7ea2857460faa40fa1bb53f0d63219a61cecf039abce7e4b" name="libcap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="46369d3c315c29c67513e6dfbed55f6b0298aeb82f141ca168fb4bbae64d3ad3" name="libcap-debugsource" arch="i686">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="6cfade39924cb19566267416a964a8d64ba2030045442bde20e491d8b874fb68" name="libcap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="b5923c7a06fda5896f1f9a2c6348adcc70a17d314bae3367cad01c7cbc186c2b" name="libcap-ng-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.2" rel="7.el9"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8-1" date="1599566400">- New upstream feature release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-1" date="1605700800">- New upstream bugfix release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-2" date="1605873600">- Add temporary patch disabling bounding set error codes</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-1" date="1607515200">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-3" date="1612008000">- Add syslog warning for bad use of capng_apply</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-4" date="1612267200">- Adjust syslog warning for bad use of capng_apply</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="&lt;ansasaki@redhat.com&gt; - 0.8.2-7" date="1644926400">- Update apply-disable patch (#2045857)
  Resolves: rhbz#2045857</changelog>
</package>
<package pkgid="668db8c6f0073472bd531c14c10637b8b792ea10c4a294bd619cbfbd4e76fd41" name="libcap-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="7.el9"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8-1" date="1599566400">- New upstream feature release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-1" date="1605700800">- New upstream bugfix release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-2" date="1605873600">- Add temporary patch disabling bounding set error codes</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-1" date="1607515200">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-3" date="1612008000">- Add syslog warning for bad use of capng_apply</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-4" date="1612267200">- Adjust syslog warning for bad use of capng_apply</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="&lt;ansasaki@redhat.com&gt; - 0.8.2-7" date="1644926400">- Update apply-disable patch (#2045857)
  Resolves: rhbz#2045857</changelog>
</package>
<package pkgid="9f45bf89eeb0a882ef56517784ee6c6c48f5256f0312aa055a2b85b8ef2ff557" name="libcap-ng-debugsource" arch="i686">
  <version epoch="0" ver="0.8.2" rel="7.el9"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8-1" date="1599566400">- New upstream feature release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-1" date="1605700800">- New upstream bugfix release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-2" date="1605873600">- Add temporary patch disabling bounding set error codes</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-1" date="1607515200">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-3" date="1612008000">- Add syslog warning for bad use of capng_apply</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-4" date="1612267200">- Adjust syslog warning for bad use of capng_apply</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="&lt;ansasaki@redhat.com&gt; - 0.8.2-7" date="1644926400">- Update apply-disable patch (#2045857)
  Resolves: rhbz#2045857</changelog>
</package>
<package pkgid="f2bd0b5c8f8eecdf10a261bc5cebc0514108790c91531fdfe8d29a110fb5cfee" name="libcap-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="7.el9"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8-1" date="1599566400">- New upstream feature release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-1" date="1605700800">- New upstream bugfix release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-2" date="1605873600">- Add temporary patch disabling bounding set error codes</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-1" date="1607515200">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-3" date="1612008000">- Add syslog warning for bad use of capng_apply</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-4" date="1612267200">- Adjust syslog warning for bad use of capng_apply</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="&lt;ansasaki@redhat.com&gt; - 0.8.2-7" date="1644926400">- Update apply-disable patch (#2045857)
  Resolves: rhbz#2045857</changelog>
</package>
<package pkgid="9dc5d1496993d7b6f923e0fe6f68a4baca4ed22aa49446c1f2049740b92647df" name="libcap-ng-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="7.el9"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8-1" date="1599566400">- New upstream feature release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-1" date="1605700800">- New upstream bugfix release</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.1-2" date="1605873600">- Add temporary patch disabling bounding set error codes</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-1" date="1607515200">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-3" date="1612008000">- Add syslog warning for bad use of capng_apply</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.2-4" date="1612267200">- Adjust syslog warning for bad use of capng_apply</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.8.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="&lt;ansasaki@redhat.com&gt; - 0.8.2-7" date="1644926400">- Update apply-disable patch (#2045857)
  Resolves: rhbz#2045857</changelog>
</package>
<package pkgid="110d26b3b5aa5b0a1d369086919043e7216cf8b971e4188dfade3b6f3d31ecb6" name="libcbor-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.0" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-7" date="1582977600">- Fix FTBFS, add version for soname, minor cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.7.0-1" date="1599480000">- update to 0.7.0
Resolves: rhbz#1813738
Resolves: rhbz#1863978</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.7.0-2" date="1600603200">- Avoid hardcoding man page extension</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="67f926a4984a339de025fbc3604b3cda0385f3119264b1df469a17cd049a4515" name="libcbor-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-7" date="1582977600">- Fix FTBFS, add version for soname, minor cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.7.0-1" date="1599480000">- update to 0.7.0
Resolves: rhbz#1813738
Resolves: rhbz#1863978</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.7.0-2" date="1600603200">- Avoid hardcoding man page extension</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6d8ec47952c3c4de7622ae55493bd72dad25a323852c40c45ffc89eb855a1be9" name="libcbor-debugsource" arch="i686">
  <version epoch="0" ver="0.7.0" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-7" date="1582977600">- Fix FTBFS, add version for soname, minor cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.7.0-1" date="1599480000">- update to 0.7.0
Resolves: rhbz#1813738
Resolves: rhbz#1863978</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.7.0-2" date="1600603200">- Avoid hardcoding man page extension</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8e8509cbeb0c9f289fe96e5a2bb770947cc9e3910afcfda87f03fe4526cb72bb" name="libcbor-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-7" date="1582977600">- Fix FTBFS, add version for soname, minor cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.7.0-1" date="1599480000">- update to 0.7.0
Resolves: rhbz#1813738
Resolves: rhbz#1863978</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.7.0-2" date="1600603200">- Avoid hardcoding man page extension</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e17743912d38f984b40094c2b766e1c03ea6bffe6bee3dd06790ec7fc213801d" name="libcollection-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.0" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="dbdce35a242a3ee2821a1eb38312892afc80a7053c681410b826581e479203f6" name="libcollection-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="0135230264d3e4eb3e8aa3482ed52ccd6653ed7fcc8d6bad8e6f3d9019482fd6" name="libcom_err-debuginfo" arch="i686">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="5a1f4d14fbc84379f062ed853f38c0735b220ece8dbba8c523330d28f6ac85aa" name="libcom_err-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="211af3d09135e07e0d5aba23249717565dd0499069474a9682b992a81bb9df65" name="libcomps-debuginfo" arch="i686">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="5b541ddc54d9c2140004b68c536858bd8d01b947420e61b17526cd951da325de" name="libcomps-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="1e81a7c5f91eb199e8425ff121555c584856bfefb6a839253d2c3f201445f9f8" name="libcomps-debugsource" arch="i686">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="9f88c07bd2c7720c9b58addd772d966362e3445e0fcd57d6d7eacc4f62b167a3" name="libcomps-debugsource" arch="x86_64">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="f73e6b2293b3b62d47f98fb40f94b56a40477e432355e0a537d54acfb5b0bbfc" name="libconfig-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.2" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8f1d91515cdade2800aee024154142e9489aa761c25e9983a9e2cb9d854ad1c9" name="libconfig-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7b5d1e904f13637aabab8c5707f91b386bd03d53cc096c7cdeb230b35ecdd6fd" name="libconfig-debugsource" arch="i686">
  <version epoch="0" ver="1.7.2" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2bee677e53df752a2ba8df448e49161fbfecbae7b86d25c5a497ee63c85eaf08" name="libconfig-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="24d215bdd76f56b1051a26268328f76e00bc0c4e91e82a95c9c04a4842cb60ab" name="libcurl-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="4762b29b45b062c3483cbd5d110944866426a870bf491d83588dd1dc27aee4db" name="libcurl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="9516ed968f4941ede3b01a3d2d41d082155a96fa0af0333ab5a069ad6f1dba81" name="libcurl-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="420e133a17da63daf2999efa924d7d5e0cd6da59e772104c98ff10d4284b489b" name="libcurl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="8512d32e0acf49f82dd153f20dbaf5172b2caf8a8095dbef62b1981472703303" name="libcurl-minimal-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="1beeb608c974e6a51b3b5d8909194c86681101bb44c4782c1490adfd4005aac3" name="libcurl-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="b71b00ca22bf389a0904f6f535070d522143221d09921c97d16c2726c6276e9a" name="libcurl-minimal-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="0f12ddf1897e6f67b85d3c8ff4bf65576df10f38f61fb365700091c5f9b4ee0b" name="libcurl-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9_8.5"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.1" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.3" date="1784030400">- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.4" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40.el9_8.5" date="1784808000">- fix missing %patch macros for Patch46 and Patch47</changelog>
</package>
<package pkgid="84d8f4cf7d893e7ae67797d82918f746309ef8cdd16eab0b87c4afa63e7bb5b7" name="libdaemon-debuginfo" arch="i686">
  <version epoch="0" ver="0.14" rel="23.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-19" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-22" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="45110d83c8df7d7482087e82f42803a9251e326c19c4aed9989e8605c2a534cd" name="libdaemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.14" rel="23.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-19" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-22" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9ddaf3bb9835e07b83df11dfae4efbc8dd55f28ccc8bf106c949c69ab1c32d94" name="libdaemon-debugsource" arch="i686">
  <version epoch="0" ver="0.14" rel="23.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-19" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-22" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="99df042e3c109ddc97259c18c52ddca8f4917d3e69bef1b5037efb8f13890793" name="libdaemon-debugsource" arch="x86_64">
  <version epoch="0" ver="0.14" rel="23.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-19" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-22" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4de32172f55257d97a33fc3eae711066ac4626cfd67ce22bc375182bfc16958b" name="libdb-debuginfo" arch="i686">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="d289e7d61da32218b97c85c331d7a5d8a0ef1d1e12045a825ebbcc9e0ffdc38f" name="libdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="6d4cd6c152a11035d8f0626e00bea7c41c45735f5a84a66e29d432d1a7e3e0b0" name="libdb-debugsource" arch="i686">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="4cc7c8a539a22e5426b155e2b7f976ee528f3383a95ce568ce30451b4f7053b0" name="libdb-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="2386006dc1f203863a4ca448862a2b34f3d4248b11ca1562dac48e8a2eb7ada6" name="libdhash-debuginfo" arch="i686">
  <version epoch="0" ver="0.5.0" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="1b9806a5dd0bb90b825d560c6de8383f8c1f3df99c233291b2ff6f10ddf7aa44" name="libdhash-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="1c1e4acb6afba1c24a02e5bb79a38ca919216478d16a9c044199b4fae0b3a30f" name="libdnf-debuginfo" arch="i686">
  <version epoch="0" ver="0.69.0" rel="18.el9.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-10" date="1713873600">- Fix calculating a difference between two same-version RPM transacations
  (RHEL-17494)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-11" date="1715860800">- Fix reinstalling packages which conflicts with themselves in
  dnf_transaction_commit() (RHEL-1454)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-12" date="1718971200">- Do not set a default SELinux creation context if SELinux appears to be
  disabled (RHEL-43232)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.69.0-18.rocky.0.1" date="1771243200">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="7446aae46b4ff3ee86d906b7e088526fa05a0c5474a0ef99dc19b1ddfcf6b6fe" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-10" date="1713873600">- Fix calculating a difference between two same-version RPM transacations
  (RHEL-17494)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-11" date="1715860800">- Fix reinstalling packages which conflicts with themselves in
  dnf_transaction_commit() (RHEL-1454)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-12" date="1718971200">- Do not set a default SELinux creation context if SELinux appears to be
  disabled (RHEL-43232)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.69.0-18.rocky.0.1" date="1771243200">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="36bbe9a84a4bd1ecb308968cca35a502388a80e2f6080a139a7a69ea3bb60804" name="libdnf-debugsource" arch="i686">
  <version epoch="0" ver="0.69.0" rel="18.el9.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-10" date="1713873600">- Fix calculating a difference between two same-version RPM transacations
  (RHEL-17494)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-11" date="1715860800">- Fix reinstalling packages which conflicts with themselves in
  dnf_transaction_commit() (RHEL-1454)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-12" date="1718971200">- Do not set a default SELinux creation context if SELinux appears to be
  disabled (RHEL-43232)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.69.0-18.rocky.0.1" date="1771243200">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="7d7bb83360a7f7b504a24c871fc0e48fa61d44c452213ea87305251edd0cfa84" name="libdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-10" date="1713873600">- Fix calculating a difference between two same-version RPM transacations
  (RHEL-17494)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-11" date="1715860800">- Fix reinstalling packages which conflicts with themselves in
  dnf_transaction_commit() (RHEL-1454)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-12" date="1718971200">- Do not set a default SELinux creation context if SELinux appears to be
  disabled (RHEL-43232)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.69.0-18.rocky.0.1" date="1771243200">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="45dc8b3e16374a273c4d0b168eea79af920dce965ad145309c43a1b80a942a1d" name="libdnf-plugin-subscription-manager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.29.50" rel="1.el9.rocky.0.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.42-1" date="1724328000">- feat: forcefully switch automatic cloud registration to v1
  (ptoscano@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.43-1" date="1734609600">- [1.29] feat/cct-868: Subset of list command options marked as deprecated *
  Options --available, --all, --ondate, --servicelevel --no-overlap --match-
  install, --pool-only, --afterdate were marked as deprecated in ListCommand
  definition of their help string. (mgrunwal@redhat.com)
- fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
- feat: Better automatic registration logging (mhorky@redhat.com)
- fix: perform autoreg waiting when performing standard autoreg
  (ptoscano@redhat.com)
- chore: move autoreg waiting code in own function (ptoscano@redhat.com)
- docs: update proxy details in man page (jvlcek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.44-1" date="1737720000">- Revert "feat: Disable anonymous cloud registration temporarily"
  (ptoscano@redhat.com)
- Revert "feat: forcefully switch automatic cloud registration to v1"
  (ptoscano@redhat.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Update translation files (noreply@weblate.org)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (German) (atalanttore@googlemail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.45-1" date="1739275200">- fix: Do not upload profile from DNF, when it is disabled in conf
  (jhnidek@redhat.com)
- feat: dnf plugin - outsource uploading of profile to rhsmcertd.
  (jhnidek@redhat.com)
- feat: Enable register with environment names and environment types
  (jhnidek@redhat.com)
- feat: support registering specifying environments with activation keys
  (ryanverdile@gmail.com)
- chore: Remove auto-assign CI job (mhorky@redhat.com)
- feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.46-1" date="1747310400">- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Italian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Update translation files (noreply@weblate.org)
- fix: Handle improperly closed connections (mhorky@redhat.com)
- ci: use the right distro for coverage reporting (ptoscano@redhat.com)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (toscano.pino@tiscali.it)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- tests: fix mocking of get_terminal_width() in TestColumnize
  (ptoscano@redhat.com)
- feat: print compliance errors &amp; syspurpose status only in entitlement mode
  (ptoscano@redhat.com)
- feat: print "registered" as status when using SCA (ptoscano@redhat.com)
- feat: print "not registered" on status when not registered
  (ptoscano@redhat.com)
- tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
- refactor: move determination of content access mode in own method
  (ptoscano@redhat.com)
- tests: move StubIdentity to stubs (ptoscano@redhat.com)
- tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
- chore: move banner printing to its own function (ptoscano@redhat.com)
- fix: Append two additional facts to the graylist (pkoprda@redhat.com)
- refactor: Use class constant instead of variable graylist
  (pkoprda@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.47-1" date="1753963200">- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Spanish) (jsefler@redhat.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
- feat: [1.29] Call random.seed() at begining of auto-register
  (jhnidek@redhat.com)
- feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
- fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.48-1" date="1762344000">- Translated using Weblate (Korean) (simmon@nplob.com)
- ci: bump actions/upload-artifact from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
- fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
- ci: bump actions/checkout from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.49-1" date="1769515200">- RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
- fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
- feat: check if --set arg is empty when the environments module is called
  (manuelcanorojo@gmail.com)
- feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
- fix(test): Fix unit test of aws (jhnidek@redhat.com)
- fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
- chore: Make new black happy again (jhnidek@redhat.com)
- chore: Increased log level of messages (jhnidek@redhat.com)
- fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Added translation using Weblate (Finnish) (noreply-addon-
  languages@weblate.org)
- fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
- feat: added signature type log in TLS handshake (macano@redhat.com)
- feat: added internal method to get tls handshake info
  (manuelcanorojo@gmail.com)
- ci: bump actions/upload-artifact from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix profile upload because of missing self.cp (suttner@atix.de)
- Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
- ci: bump actions/checkout from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.50-1" date="1769601600">- fix: Print list of environments without --set/--list (jhnidek@redhat.com)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.29.50-1.rocky.0.1" date="1769774400">- Remove Red Hat references</changelog>
</package>
<package pkgid="215589536b41e55a744d3e89dda10ddfe8e97f633751069e802e8095c88f14b6" name="libdrm-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.128" rel="1.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-1" date="1716811200">- Update to 2.4.120
- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-2" date="1731499200">- Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
  libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="5d79e21453582054d2571ac523a638ed29b372347c2020357cd50a99f95730e1" name="libdrm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.128" rel="1.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-1" date="1716811200">- Update to 2.4.120
- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-2" date="1731499200">- Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
  libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="8f974a4f81b0018d6c7036cc19bf61671fad3adaea47a400f8f9727bf1d05138" name="libdrm-debugsource" arch="i686">
  <version epoch="0" ver="2.4.128" rel="1.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-1" date="1716811200">- Update to 2.4.120
- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-2" date="1731499200">- Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
  libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="e774b0a1e3cb9e4e7852f88ac3e8e1b5dfcf31c5f3763035be68acee78ba3175" name="libdrm-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.128" rel="1.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-1" date="1716811200">- Update to 2.4.120
- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-2" date="1731499200">- Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
  libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="0cdbdd54740452974d93f3ea187a20553ac42c4b06e5e4f02fc1f07173b2dce5" name="libeconf-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.1" rel="5.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
</package>
<package pkgid="96c59c22cf36d57afdcfbdfd94aadb49caa9b9fab49c3fa6760bc2155ec91a18" name="libeconf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="5.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
</package>
<package pkgid="e232bd3f8abdd26477c196f6dea298d17aeb318d7d63403fd22219d756243152" name="libeconf-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="5ac7b18d1c2a2a736823258ccb91d28823c07b38b866d759d7e3393ee86e5fac" name="libeconf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="cb805ee6bc58a09f8ce0aa288a1cdbc60f5216ef0a87df21e46325feb03a4d7f" name="libeconf-debugsource" arch="i686">
  <version epoch="0" ver="0.4.1" rel="5.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
</package>
<package pkgid="ebc74340473293fd6800ecbae54338f8780d8edda6e4e129e7793cb0b32fe672" name="libeconf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="5.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
</package>
<package pkgid="e4a1c15ee272d2e422272d5f889727b5129e1d542ed9e3198911fdea6fac4ef9" name="libeconf-debugsource" arch="i686">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="7204977dfc23ffc02c30cc1105c1f3ef3b2d8b1a626dde7a17d90c812b8ed0a3" name="libeconf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="9a9c6a35af7c76baf279b84e62f9ad65db9a676fabf79853eecea9caab29dd2d" name="libedit-debuginfo" arch="i686">
  <version epoch="0" ver="3.1" rel="39.20210216cvs.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1-39.20210216cvs" date="1768478400">- Fix removing of readline callback handler (RHEL-133732)</changelog>
</package>
<package pkgid="d6d12efd507541876b35a07f72d8a04badd27a971196f40bf451d67b8cc123d3" name="libedit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1" rel="39.20210216cvs.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1-39.20210216cvs" date="1768478400">- Fix removing of readline callback handler (RHEL-133732)</changelog>
</package>
<package pkgid="bedfe475b12b2097776cf77ffc9cd7ec5f4a06790f8e407cf8ac2483c583cf2d" name="libedit-debugsource" arch="i686">
  <version epoch="0" ver="3.1" rel="39.20210216cvs.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1-39.20210216cvs" date="1768478400">- Fix removing of readline callback handler (RHEL-133732)</changelog>
</package>
<package pkgid="1a20f1c593a54f946dd7bfb4aacf06d0c5e0e9c2a9351eaac6106c3268d68d4b" name="libedit-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1" rel="39.20210216cvs.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1-39.20210216cvs" date="1768478400">- Fix removing of readline callback handler (RHEL-133732)</changelog>
</package>
<package pkgid="1b9c826cfb182d30a0773f24a3e2ed83e341396bdf918693132d19c5208c3fe5" name="libev-debuginfo" arch="i686">
  <version epoch="0" ver="4.33" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.33-6" date="1726574400">- add -devel subpackage into CRB
- Resolves: RHEL-38617</changelog>
</package>
<package pkgid="e177271c88e1d9bbcb3949ccf4d5c0b9259f3ad255d780d7aa15addd005ffca0" name="libev-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.33" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.33-6" date="1726574400">- add -devel subpackage into CRB
- Resolves: RHEL-38617</changelog>
</package>
<package pkgid="4061920f222c4a6a7608a8654869250de49804a9fcb720c246fc59a98d693c7a" name="libev-debugsource" arch="i686">
  <version epoch="0" ver="4.33" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.33-6" date="1726574400">- add -devel subpackage into CRB
- Resolves: RHEL-38617</changelog>
</package>
<package pkgid="7452a0bad1aaa5ff7b74372e61594ef00c0d0f3b6ec49b5125f3e0cd325f8d19" name="libev-debugsource" arch="x86_64">
  <version epoch="0" ver="4.33" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.33-6" date="1726574400">- add -devel subpackage into CRB
- Resolves: RHEL-38617</changelog>
</package>
<package pkgid="2e83eb6377991862abd2fc8dca8229343f79ea002232d3c1ab4d9b8b9ec5a269" name="libevent-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.12" rel="8.el9_4"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-7" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-26128</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-8" date="1724155200">- Rework the patch from 2.1.12-7 to prevent ABI changes.
- Related: RHEL-26128</changelog>
</package>
<package pkgid="a5efa32c4c13d964df268669a79b48866cfd3aa143167152263525dc6d985b19" name="libevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.12" rel="8.el9_4"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-7" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-26128</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-8" date="1724155200">- Rework the patch from 2.1.12-7 to prevent ABI changes.
- Related: RHEL-26128</changelog>
</package>
<package pkgid="477ba64ef31cc8f2b5717a2805f61161cdedb878c400cfcf629b200d0caa861e" name="libevent-debugsource" arch="i686">
  <version epoch="0" ver="2.1.12" rel="8.el9_4"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-7" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-26128</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-8" date="1724155200">- Rework the patch from 2.1.12-7 to prevent ABI changes.
- Related: RHEL-26128</changelog>
</package>
<package pkgid="57d8b1c628afbd4a787acb7f0d68dff45a464f00496d4835e281b8a356b2209f" name="libevent-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.12" rel="8.el9_4"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-7" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-26128</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-8" date="1724155200">- Rework the patch from 2.1.12-7 to prevent ABI changes.
- Related: RHEL-26128</changelog>
</package>
<package pkgid="57f26430ddd375837b60c9280ff3f5eee5fb29499dbf254fd0b82ad4079be00f" name="libfdisk-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="d648eafb89b9e71a8f16d25313e3b489ec7546489e1ab5d1d4f86e5a211b2263" name="libfdisk-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="a3831ac9a1f91b94e0c80d8721161dc150a40792d5ffddd973badbc4e1b04ded" name="libffi-debuginfo" arch="i686">
  <version epoch="0" ver="3.4.2" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-1" date="1624881600">- Rebase to libffi 3.4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-3" date="1627387200">- Add temporary compat-libffi3.1 for library transition.</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-4" date="1627560000">- Drop pkgconf support for compat-libffi3.1.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.4.2-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-6" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 3.4.2-7" date="1629979200">- Remove compat-libffi3.1 subpackage to complete SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.4.2-8" date="1680868800">- Use /etc/sysconfig/libffi-force-shared-memory-check-first to
  override selinux permissions check for shared memory access (#2152228)</changelog>
</package>
<package pkgid="a9f20afd3d49ecf600c63a3493f55b5322fb181559e79cd1d73b3a3634271c1a" name="libffi-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-1" date="1624881600">- Rebase to libffi 3.4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-3" date="1627387200">- Add temporary compat-libffi3.1 for library transition.</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-4" date="1627560000">- Drop pkgconf support for compat-libffi3.1.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.4.2-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-6" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 3.4.2-7" date="1629979200">- Remove compat-libffi3.1 subpackage to complete SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.4.2-8" date="1680868800">- Use /etc/sysconfig/libffi-force-shared-memory-check-first to
  override selinux permissions check for shared memory access (#2152228)</changelog>
</package>
<package pkgid="f1057c766f72589eb7fb9671d62d8bd3a2f2c3b01096de7123a7e2a4e97f3d1c" name="libffi-debugsource" arch="i686">
  <version epoch="0" ver="3.4.2" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-1" date="1624881600">- Rebase to libffi 3.4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-3" date="1627387200">- Add temporary compat-libffi3.1 for library transition.</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-4" date="1627560000">- Drop pkgconf support for compat-libffi3.1.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.4.2-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-6" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 3.4.2-7" date="1629979200">- Remove compat-libffi3.1 subpackage to complete SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.4.2-8" date="1680868800">- Use /etc/sysconfig/libffi-force-shared-memory-check-first to
  override selinux permissions check for shared memory access (#2152228)</changelog>
</package>
<package pkgid="6df97abd2c09f0e997f379f85ec6eca9866806a42749ebd319930ca3e2606419" name="libffi-debugsource" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-1" date="1624881600">- Rebase to libffi 3.4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-3" date="1627387200">- Add temporary compat-libffi3.1 for library transition.</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-4" date="1627560000">- Drop pkgconf support for compat-libffi3.1.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.4.2-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 3.4.2-6" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 3.4.2-7" date="1629979200">- Remove compat-libffi3.1 subpackage to complete SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.4.2-8" date="1680868800">- Use /etc/sysconfig/libffi-force-shared-memory-check-first to
  override selinux permissions check for shared memory access (#2152228)</changelog>
</package>
<package pkgid="9f6ca387d56dd7ebe18fc96fcd8bf5d1e86eba18f252ecdb472566bd905f6066" name="libfido2-debuginfo" arch="i686">
  <version epoch="0" ver="1.13.0" rel="2.el9"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-1" date="1681905600">- Upgrade to 1.13
  Resolves: rhbz#2122193</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-2" date="1699444800">- rebuilt</changelog>
</package>
<package pkgid="b8649dd6ec4b0c253b4fc0e1ffbed49ca544b7dccb3103cf108ef235b669e9f9" name="libfido2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="2.el9"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-1" date="1681905600">- Upgrade to 1.13
  Resolves: rhbz#2122193</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-2" date="1699444800">- rebuilt</changelog>
</package>
<package pkgid="b796ed0e252727697b6a3afa5919f8716ab7d5483888e8740aba8f9e919d0e8b" name="libfido2-debugsource" arch="i686">
  <version epoch="0" ver="1.13.0" rel="2.el9"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-1" date="1681905600">- Upgrade to 1.13
  Resolves: rhbz#2122193</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-2" date="1699444800">- rebuilt</changelog>
</package>
<package pkgid="7dd5c5d7ae2a43a7d66f5b3763dc7e26067cb7fe349b0a311d2d676804c2bf40" name="libfido2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="2.el9"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-1" date="1681905600">- Upgrade to 1.13
  Resolves: rhbz#2122193</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.13.0-2" date="1699444800">- rebuilt</changelog>
</package>
<package pkgid="3ed174df444117bb827e97c533f6c438d6b9c730a9369f4c64470669c5e24a0b" name="libgcab1-debuginfo" arch="i686">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3fdcadf44a43acb4426b22ca5a2026df37cad9a88770f95094fd4af7ca8be343" name="libgcab1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="923c4aaed61bd82fd443a9b409c8a720e324653ffff1096669a41769692c2feb" name="libgcc-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="bfdab2760b03dbc031e2223f50027a43a03cce9b203fd78cfacb88bc39aef443" name="libgcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="d825a980c106eed2e6b66a42a52f14fdbdaa2e388a333dbc4264fac798139689" name="libgcrypt-debuginfo" arch="i686">
  <version epoch="0" ver="1.10.0" rel="11.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-5" date="1660737600">- Allow signature verification with smaller RSA keys (#2083846)
- Allow short salt for KDF (#2114870)
- Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
- Address FIPS review comments around selftests (#2118695)
- Disable RSA-OAEP in FIPS mode (#2118695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-6" date="1664280000">- Fix SHA3 digests with large inputs (#2129150)
- Fix FIPS RSA PCT (#2128455)
- Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
- Get max 32B from getrandom in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-7" date="1665057600">- Properly enforce KDF limits in FIPS mode (#2130275)
- Fix memory leak in large digest test (#2129150)
- Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
- Skip RSA encryption/decryption selftest in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-8" date="1666267200">- Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
- Enforce HMAC key lengths in MD API in FIPS mode</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-9" date="1674561600">- Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
- Do not allow large salt lengths with RSA-PSS padding
- Disable X9.31 key generation in FIPS mode
- Update the FIPS integrity checking code to upstream version
- Update cipher modes FIPS indicators for AES WRAP and GCM
- Disable jitter entropy generator</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-10" date="1679313600">- Provide FIPS indicators for MD and HMACs
- Improve PCT tests for ECDSA and always run them after key is generated
- Add missing guards for FIPS status in md_sign/verify function
- Provider FIPS indicators for public key operation flags</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
</package>
<package pkgid="a2b3fdc0dacae5ed674620f836e19f7cd767ea1e7f617491ec7f63bdebe4e223" name="libgcrypt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="11.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-5" date="1660737600">- Allow signature verification with smaller RSA keys (#2083846)
- Allow short salt for KDF (#2114870)
- Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
- Address FIPS review comments around selftests (#2118695)
- Disable RSA-OAEP in FIPS mode (#2118695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-6" date="1664280000">- Fix SHA3 digests with large inputs (#2129150)
- Fix FIPS RSA PCT (#2128455)
- Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
- Get max 32B from getrandom in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-7" date="1665057600">- Properly enforce KDF limits in FIPS mode (#2130275)
- Fix memory leak in large digest test (#2129150)
- Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
- Skip RSA encryption/decryption selftest in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-8" date="1666267200">- Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
- Enforce HMAC key lengths in MD API in FIPS mode</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-9" date="1674561600">- Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
- Do not allow large salt lengths with RSA-PSS padding
- Disable X9.31 key generation in FIPS mode
- Update the FIPS integrity checking code to upstream version
- Update cipher modes FIPS indicators for AES WRAP and GCM
- Disable jitter entropy generator</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-10" date="1679313600">- Provide FIPS indicators for MD and HMACs
- Improve PCT tests for ECDSA and always run them after key is generated
- Add missing guards for FIPS status in md_sign/verify function
- Provider FIPS indicators for public key operation flags</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
</package>
<package pkgid="92df4e7d18e80dc4f3e844264aa35371ce65dfb45ea3e0e584eb9516e3e25c36" name="libgcrypt-debuginfo" arch="i686">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="1e6f8ea6462be9d5cbc137d5e7a59840caf9a1de2fa0f863dc68cfaa6b8e9c9d" name="libgcrypt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="73e9c25a15894731ab165b267783ca5b6689a002e018f66e5f368948cc92e979" name="libgcrypt-debugsource" arch="i686">
  <version epoch="0" ver="1.10.0" rel="11.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-5" date="1660737600">- Allow signature verification with smaller RSA keys (#2083846)
- Allow short salt for KDF (#2114870)
- Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
- Address FIPS review comments around selftests (#2118695)
- Disable RSA-OAEP in FIPS mode (#2118695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-6" date="1664280000">- Fix SHA3 digests with large inputs (#2129150)
- Fix FIPS RSA PCT (#2128455)
- Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
- Get max 32B from getrandom in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-7" date="1665057600">- Properly enforce KDF limits in FIPS mode (#2130275)
- Fix memory leak in large digest test (#2129150)
- Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
- Skip RSA encryption/decryption selftest in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-8" date="1666267200">- Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
- Enforce HMAC key lengths in MD API in FIPS mode</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-9" date="1674561600">- Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
- Do not allow large salt lengths with RSA-PSS padding
- Disable X9.31 key generation in FIPS mode
- Update the FIPS integrity checking code to upstream version
- Update cipher modes FIPS indicators for AES WRAP and GCM
- Disable jitter entropy generator</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-10" date="1679313600">- Provide FIPS indicators for MD and HMACs
- Improve PCT tests for ECDSA and always run them after key is generated
- Add missing guards for FIPS status in md_sign/verify function
- Provider FIPS indicators for public key operation flags</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
</package>
<package pkgid="ac53140a5123b3a060728f9b3efc93a85bb4e92b0eeb7f9f1d9ae78f33e60ed4" name="libgcrypt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="11.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-5" date="1660737600">- Allow signature verification with smaller RSA keys (#2083846)
- Allow short salt for KDF (#2114870)
- Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
- Address FIPS review comments around selftests (#2118695)
- Disable RSA-OAEP in FIPS mode (#2118695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-6" date="1664280000">- Fix SHA3 digests with large inputs (#2129150)
- Fix FIPS RSA PCT (#2128455)
- Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
- Get max 32B from getrandom in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-7" date="1665057600">- Properly enforce KDF limits in FIPS mode (#2130275)
- Fix memory leak in large digest test (#2129150)
- Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
- Skip RSA encryption/decryption selftest in FIPS mode (#2130275)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-8" date="1666267200">- Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
- Enforce HMAC key lengths in MD API in FIPS mode</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-9" date="1674561600">- Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
- Do not allow large salt lengths with RSA-PSS padding
- Disable X9.31 key generation in FIPS mode
- Update the FIPS integrity checking code to upstream version
- Update cipher modes FIPS indicators for AES WRAP and GCM
- Disable jitter entropy generator</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-10" date="1679313600">- Provide FIPS indicators for MD and HMACs
- Improve PCT tests for ECDSA and always run them after key is generated
- Add missing guards for FIPS status in md_sign/verify function
- Provider FIPS indicators for public key operation flags</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
</package>
<package pkgid="c9a44f4adfc4f50632e43ffe1586a7cd9d77f2fe63a8c0e25c6e589a4a62dfe9" name="libgcrypt-debugsource" arch="i686">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="88645799d41ca452a5d3b00af9cf3041eb714499db086c127732db6f7370c13c" name="libgcrypt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="be8f203b13ec0b902e97d4a6eeb7420383e73b3afde87c13dd8acf309198216e" name="libgfortran-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="225bf1fdb930e79edf76cbbf2d584e7248416c683b13b630efdf533abf374009" name="libgfortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="c8dd12077032bd3b6a192053485446ba2b5351472e8582aa974f8debb50e6fa1" name="libgomp-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="68e696bd0c75cad7cc4af1284a87b25bd46c643e8ad4b03788874704aa66e072" name="libgomp-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="c9da226f5d91685ad4f9fc8736b84430227d753205cc8537f9a3f96d5a386d7f" name="libgpg-error-debuginfo" arch="i686">
  <version epoch="0" ver="1.42" rel="5.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.37-1" date="1582891200">- new upstream release 1.37</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.37-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.39-1" date="1606824000">- New upstream release (#1800640)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.41-1" date="1609761600">- New upstream release (#1909749)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.41-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-1" date="1616414400">- New upstream release (#1941582)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-2" date="1618228800">- Address coverity reported issues</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-5" date="1638792000">- Avoid using bad function inet_addr</changelog>
</package>
<package pkgid="fcb8bf8b86ff1fdaf4526db8977dd4738f1d392a6d919463c2096028e5ba5e01" name="libgpg-error-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.42" rel="5.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.37-1" date="1582891200">- new upstream release 1.37</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.37-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.39-1" date="1606824000">- New upstream release (#1800640)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.41-1" date="1609761600">- New upstream release (#1909749)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.41-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-1" date="1616414400">- New upstream release (#1941582)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-2" date="1618228800">- Address coverity reported issues</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-5" date="1638792000">- Avoid using bad function inet_addr</changelog>
</package>
<package pkgid="96a0f4e2b8ad6d44962be38a8da197ad8582142366cadd9cc9117dd9256118dc" name="libgpg-error-debugsource" arch="i686">
  <version epoch="0" ver="1.42" rel="5.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.37-1" date="1582891200">- new upstream release 1.37</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.37-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.39-1" date="1606824000">- New upstream release (#1800640)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.41-1" date="1609761600">- New upstream release (#1909749)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.41-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-1" date="1616414400">- New upstream release (#1941582)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-2" date="1618228800">- Address coverity reported issues</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-5" date="1638792000">- Avoid using bad function inet_addr</changelog>
</package>
<package pkgid="3f06dde220702f6d8d008d63163ac55e544f26bd07005bcbaf90a7a8d4153ac7" name="libgpg-error-debugsource" arch="x86_64">
  <version epoch="0" ver="1.42" rel="5.el9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.37-1" date="1582891200">- new upstream release 1.37</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.37-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.39-1" date="1606824000">- New upstream release (#1800640)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.41-1" date="1609761600">- New upstream release (#1909749)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.41-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-1" date="1616414400">- New upstream release (#1941582)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-2" date="1618228800">- Address coverity reported issues</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.42-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.42-5" date="1638792000">- Avoid using bad function inet_addr</changelog>
</package>
<package pkgid="9d7af1cf10414924d776a285574cb1da87adc44af1cc755af4065f9a2a1636ef" name="libgudev-debuginfo" arch="i686">
  <version epoch="0" ver="237" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 234-1" date="1600171200">+ libgudev-234-1
- Update to 234</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 234-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 236-1" date="1615896000">+ libgudev-236-1
- Update to 236</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 237-1" date="1629288000">+ libgudev-237-1
- Update to 237
- Resolves: rhbz#1995044</changelog>
</package>
<package pkgid="7e14398d5cf63d7e0248a05e0804d11cb36eac596c4ea018dda6f9a1ef5fc91b" name="libgudev-debuginfo" arch="x86_64">
  <version epoch="0" ver="237" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 234-1" date="1600171200">+ libgudev-234-1
- Update to 234</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 234-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 236-1" date="1615896000">+ libgudev-236-1
- Update to 236</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 237-1" date="1629288000">+ libgudev-237-1
- Update to 237
- Resolves: rhbz#1995044</changelog>
</package>
<package pkgid="51ee62da863b45711713b430bbfa48a009bd361d307b1aaf20e2c2d097ff8c31" name="libgudev-debugsource" arch="i686">
  <version epoch="0" ver="237" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 234-1" date="1600171200">+ libgudev-234-1
- Update to 234</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 234-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 236-1" date="1615896000">+ libgudev-236-1
- Update to 236</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 237-1" date="1629288000">+ libgudev-237-1
- Update to 237
- Resolves: rhbz#1995044</changelog>
</package>
<package pkgid="f8c951adfa82159496c9ac041db2a82456d786bd1bb97211d75c07eac6e9d539" name="libgudev-debugsource" arch="x86_64">
  <version epoch="0" ver="237" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 232-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 234-1" date="1600171200">+ libgudev-234-1
- Update to 234</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 234-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 236-1" date="1615896000">+ libgudev-236-1
- Update to 236</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 236-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 237-1" date="1629288000">+ libgudev-237-1
- Update to 237
- Resolves: rhbz#1995044</changelog>
</package>
<package pkgid="c22bcec264667cc05197c6db3b90b99f14b12ee48d084f4e753e6a723bda653a" name="libgusb-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.8" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-1" date="1633521600">- New upstream version
- Add new API requested by fwupd
- Add the GUsbEndpoint methods to the docs
- Fix hotplug handling and signal emission during enumerate
- Do not double-reference USB devices
- Resolves: rhbz#1965885</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-2" date="1690804800">- Backport a patch to fix a rare multithreaded crash on device replug
- Resolves: rhbz#2227760</changelog>
</package>
<package pkgid="91f9b9643ecc4f945caa468060cf381813620031d660a4a7522cb387d8cc1818" name="libgusb-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.8" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-1" date="1633521600">- New upstream version
- Add new API requested by fwupd
- Add the GUsbEndpoint methods to the docs
- Fix hotplug handling and signal emission during enumerate
- Do not double-reference USB devices
- Resolves: rhbz#1965885</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-2" date="1690804800">- Backport a patch to fix a rare multithreaded crash on device replug
- Resolves: rhbz#2227760</changelog>
</package>
<package pkgid="dc37328912a3143180372c0997dcd75715964d11fd67efc0c628677aeb4cbeb3" name="libgusb-debugsource" arch="i686">
  <version epoch="0" ver="0.3.8" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-1" date="1633521600">- New upstream version
- Add new API requested by fwupd
- Add the GUsbEndpoint methods to the docs
- Fix hotplug handling and signal emission during enumerate
- Do not double-reference USB devices
- Resolves: rhbz#1965885</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-2" date="1690804800">- Backport a patch to fix a rare multithreaded crash on device replug
- Resolves: rhbz#2227760</changelog>
</package>
<package pkgid="4d9d1ec28928b22e1f26944d9cb6b06f93a741f6d75c8baf9fc4d48d28a174f8" name="libgusb-debugsource" arch="x86_64">
  <version epoch="0" ver="0.3.8" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-1" date="1633521600">- New upstream version
- Add new API requested by fwupd
- Add the GUsbEndpoint methods to the docs
- Fix hotplug handling and signal emission during enumerate
- Do not double-reference USB devices
- Resolves: rhbz#1965885</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.3.8-2" date="1690804800">- Backport a patch to fix a rare multithreaded crash on device replug
- Resolves: rhbz#2227760</changelog>
</package>
<package pkgid="4004eb67e4526ea7cc7fcd0a82342f9a260739ccd2f2bd044cc21c1b7dc455f6" name="libibumad-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="b15c082500cd7cde12f5ad2048103b5895a85d581f160fbc5e77cc1e4c3e0340" name="libibumad-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="5cf4e9943d08be28bc19bdfc316b5bf0653e5e44af4e87da142f6cedd321dead" name="libibverbs-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="f1367985adde7974709988be6612916928088b77d04a0190322a22c0cefc923a" name="libibverbs-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="0cba43c3fa98fa20acce329bcc7dddc5cdbaefa51007b468d91c5f965751be29" name="libibverbs-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="a46c8cc5e302b4a0cc3735d260bfb7f44cb86b7dfed48031557dfc1d5b276271" name="libicu-debuginfo" arch="i686">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="6662f16c98f2647c02802c3c994836db09ba45fa12c75701d338adaebff2dfed" name="libicu-debuginfo" arch="x86_64">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="e044c7f36116b29ea97fdab3f37532fb521b91da0cc82538ed45e1d340bd2e30" name="libidn2-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.0" rel="7.el9"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.0-1" date="1573905600">- Upgrade to 2.3.0 (#1764345, #1772703)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.3.0-3" date="1590494400">- Touch a couple autoconf related files to prevent undesired rebuilding
  if %configure changes one or more configure files.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="87f6afdbf7ba4fce1fd6d8b08708a63861a0d2ac47f8805774c5ee58c4416ac5" name="libidn2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="7.el9"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.0-1" date="1573905600">- Upgrade to 2.3.0 (#1764345, #1772703)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.3.0-3" date="1590494400">- Touch a couple autoconf related files to prevent undesired rebuilding
  if %configure changes one or more configure files.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6e6f4052009b127b9a7ae3fb6dda01571e35213578621722a0d519bc07964146" name="libidn2-debugsource" arch="i686">
  <version epoch="0" ver="2.3.0" rel="7.el9"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.0-1" date="1573905600">- Upgrade to 2.3.0 (#1764345, #1772703)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.3.0-3" date="1590494400">- Touch a couple autoconf related files to prevent undesired rebuilding
  if %configure changes one or more configure files.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5840efeb7cd12c7f8a4098248888138ace253f522499905f7fac9846a8a778d7" name="libidn2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="7.el9"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.0-1" date="1573905600">- Upgrade to 2.3.0 (#1764345, #1772703)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.3.0-3" date="1590494400">- Touch a couple autoconf related files to prevent undesired rebuilding
  if %configure changes one or more configure files.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c4f1b43ea79a8f74dbfbaa060764835ccfb94e7be0007544c9ee12172eeaef0c" name="libini_config-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="e89c47108b795b21cc40ef47c6ad33a90c2e2d3fd036fcedeb5b6cc40e1f78bf" name="libini_config-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="30de9bddceccb31b4e56157ba3816763e174f76d10e6d69346d8b93871163be2" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="ed10e149440e288b10ea3c5ac18e56507d52446c7263d963b96687833970e082" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="1b4dc6b87bace0db8c75b9cb548a87aa7244ce6c6ebc48f7bf8d41940cf774e4" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="e8d63f6da1b65b85fb79ab30eb268e7f8546f0e299f0ecd0fb62faa201185b2a" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="a00e6aef71f39b401ef2632795346a15db9f2c159570ccd6db6e9789141f094b" name="libjcat-debuginfo" arch="i686">
  <version epoch="0" ver="0.1.6" rel="3.el9"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.2-2" date="1591358400">- Fix for CVE-2020-10759</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.3-1" date="1592308800">- New upstream release
- Export the JcatBlobKind and JcatBlobMethod on the result</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-3" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.4-1" date="1603454400">- New upstream release
- Export the old JCatEngine property to preserve internal ABI</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.5-1" date="1610107200">- New upstream release
- Allow verifying expired certificates with an additional argument</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.6-1" date="1612785600">- New upstream release
- Fall back to the AliasId for validation
- Fix jcat_context_verify_blob() to use self verify for checksums</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d6c8c2abcd06f6b423e174e5f6acac32d4c818a81502402e6b217b8438c4e81e" name="libjcat-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.6" rel="3.el9"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.2-2" date="1591358400">- Fix for CVE-2020-10759</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.3-1" date="1592308800">- New upstream release
- Export the JcatBlobKind and JcatBlobMethod on the result</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-3" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.4-1" date="1603454400">- New upstream release
- Export the old JCatEngine property to preserve internal ABI</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.5-1" date="1610107200">- New upstream release
- Allow verifying expired certificates with an additional argument</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.6-1" date="1612785600">- New upstream release
- Fall back to the AliasId for validation
- Fix jcat_context_verify_blob() to use self verify for checksums</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="284f7f35c681e7657b90783bb1ffd091039e565fc269a9cd957049ff22d7670e" name="libjcat-debugsource" arch="i686">
  <version epoch="0" ver="0.1.6" rel="3.el9"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.2-2" date="1591358400">- Fix for CVE-2020-10759</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.3-1" date="1592308800">- New upstream release
- Export the JcatBlobKind and JcatBlobMethod on the result</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-3" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.4-1" date="1603454400">- New upstream release
- Export the old JCatEngine property to preserve internal ABI</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.5-1" date="1610107200">- New upstream release
- Allow verifying expired certificates with an additional argument</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.6-1" date="1612785600">- New upstream release
- Fall back to the AliasId for validation
- Fix jcat_context_verify_blob() to use self verify for checksums</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="57892004ee2eba62f0f129c37e57c6a342fd30e3fe773e648c70d38308f67270" name="libjcat-debugsource" arch="x86_64">
  <version epoch="0" ver="0.1.6" rel="3.el9"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.2-2" date="1591358400">- Fix for CVE-2020-10759</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.3-1" date="1592308800">- New upstream release
- Export the JcatBlobKind and JcatBlobMethod on the result</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-3" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.4-1" date="1603454400">- New upstream release
- Export the old JCatEngine property to preserve internal ABI</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.5-1" date="1610107200">- New upstream release
- Allow verifying expired certificates with an additional argument</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.6-1" date="1612785600">- New upstream release
- Fall back to the AliasId for validation
- Fix jcat_context_verify_blob() to use self verify for checksums</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0c06d65b94f05c2308339920f995ed72bf15284eb350bfe6d8652ffc075e6ecc" name="libkadm5-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="32a75d80313b790990bd3972ef65c32182c0a9073f7adfad06842099f19ee12e" name="libkadm5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="03df2835dec77d670a35f19653524e564adcf0e5667777490e45b8e030f4d6d2" name="libkcapi-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="5a906b08cdb5dbc84aa8d5cd060d9cbfef13fa37d8eff8531e9ed1dd4548e8b2" name="libkcapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="9f7d9f16e49264a6ab20b58f7ac783e0e50a1c36662022876c9d5ca38d8e95cd" name="libkcapi-debugsource" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="8741b1bd44f53cfc6c14e265a36eab4f8830b0e484548ff80ff4f34272efed0c" name="libkcapi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="7795a7bf7cedc874e1a275e2d9113de1e5881e29121f4974e62572621a0989db" name="libkcapi-hmaccalc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="d889200db6375b5f671cccd0895572abd7506a4ec65778805f05930153e6ac39" name="libksba-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.1" rel="7.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-5" date="1666180800">- Fix for CVE-2022-3515 (#2135703)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-6" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-7" date="1722340800">- Fix SAST reports (RHEL-25067)</changelog>
</package>
<package pkgid="d761b92f40b919164a0aab7b571835193ac4a977177d02de8dde7b37b65b7792" name="libksba-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="7.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-5" date="1666180800">- Fix for CVE-2022-3515 (#2135703)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-6" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-7" date="1722340800">- Fix SAST reports (RHEL-25067)</changelog>
</package>
<package pkgid="2a7278229872d0b760b30d49b4d9a46deb2ab6e9ceb765a23a898903baac0e07" name="libksba-debugsource" arch="i686">
  <version epoch="0" ver="1.5.1" rel="7.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-5" date="1666180800">- Fix for CVE-2022-3515 (#2135703)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-6" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-7" date="1722340800">- Fix SAST reports (RHEL-25067)</changelog>
</package>
<package pkgid="60b33d5d31318a3549b7e6afef96238a729bcbd934c3cae05780a9296d26835e" name="libksba-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="7.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-5" date="1666180800">- Fix for CVE-2022-3515 (#2135703)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-6" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.1-7" date="1722340800">- Fix SAST reports (RHEL-25067)</changelog>
</package>
<package pkgid="14d2a8b5cbd9375d80015faa551827ae5efb058b601736d5da09430ec084442f" name="libldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="c465c7440dcc5a120dd6487a85f4196ecc42516ae35b37aa118926aa0e777916" name="libldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="dacfee233dd02e7b3262880338db73ace3e5c59b576174ab8b006deb3f6ff592" name="libldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="72bdc64d12ce9715108a5897c1c058e0f8b1168f4e0faeca1020212405050bce" name="libldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="0fc492716a0b6c8ce6c188a797b66862aad3d7ed4fbe9067fe1b868f4fdb4da6" name="libldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="6051849a707a77ce3c821c4d5a9e099d682e5ac3247f50c71f8bcd75381dff05" name="libldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="8f4907b2f56e688f00dda89adb3523db6433081725385a47d6531ac05b49a84f" name="liblockfile-debuginfo" arch="i686">
  <version epoch="0" ver="1.14" rel="10.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.14-10" date="1660132800">- 2112377 - move liblockfile to BaseOS</changelog>
</package>
<package pkgid="8286f6ab3561206d751758e3d65fbe9d42e9cfbe75ada496994797b90e779236" name="liblockfile-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14" rel="10.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.14-10" date="1660132800">- 2112377 - move liblockfile to BaseOS</changelog>
</package>
<package pkgid="111eced3e3bb38cef0053a17e70a5b15a8bf4113649164d71d7c686e7ce3758f" name="liblockfile-debugsource" arch="i686">
  <version epoch="0" ver="1.14" rel="10.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.14-10" date="1660132800">- 2112377 - move liblockfile to BaseOS</changelog>
</package>
<package pkgid="895bae9fe1b2240cb411a2ea4262a128fd37c0b7200e81e99e8d8ceb14976d4b" name="liblockfile-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14" rel="10.el9.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.14-10" date="1660132800">- 2112377 - move liblockfile to BaseOS</changelog>
</package>
<package pkgid="519ae380797f42638ad925da79731450c8de2ecb7c87a08f042d5e98ae285c52" name="libmbim-debuginfo" arch="i686">
  <version epoch="0" ver="1.32.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-1" date="1741262400">- Update to 1.30.0</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101709)</changelog>
</package>
<package pkgid="6c75192c685e909f5515d220a61f7bad9da87abe3c34ca4fc5f699d5789703e1" name="libmbim-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.32.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-1" date="1741262400">- Update to 1.30.0</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101709)</changelog>
</package>
<package pkgid="9ee5f3cb1144e0f1a315a734e2a9221814796937bf81653f0599d1ee760414dc" name="libmbim-debugsource" arch="i686">
  <version epoch="0" ver="1.32.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-1" date="1741262400">- Update to 1.30.0</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101709)</changelog>
</package>
<package pkgid="959cd746bb2088974c6d2094713dd836093814d98668cbdbd2cd3dc1b2dad841" name="libmbim-debugsource" arch="x86_64">
  <version epoch="0" ver="1.32.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-1" date="1741262400">- Update to 1.30.0</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101709)</changelog>
</package>
<package pkgid="51205e752f74e16e3c8e2ff98b04232254d55b6e234c68a6cff719509ab7de59" name="libmbim-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.32.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-1" date="1741262400">- Update to 1.30.0</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101709)</changelog>
</package>
<package pkgid="d6e8f5445622b21e9c3c6e57172baaa5a9ef2843f530594f1b004f703b5c49c8" name="libmnl-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.4" rel="16.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.4-16" date="1715256000">- libmnl: zero attribute padding</changelog>
</package>
<package pkgid="3151668077e2c87916bd3441b20f6c10998f026cc9d7a5beff6936b3c248a80d" name="libmnl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="16.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.4-16" date="1715256000">- libmnl: zero attribute padding</changelog>
</package>
<package pkgid="63f7ee861a89fe09fda099653225ab9a7e711039766f96f28edbfef21e057308" name="libmnl-debugsource" arch="i686">
  <version epoch="0" ver="1.0.4" rel="16.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.4-16" date="1715256000">- libmnl: zero attribute padding</changelog>
</package>
<package pkgid="f159ce78accd606452641310f0935d9d6602a8e6e9535235fa7bbfc9c7064ccc" name="libmnl-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="16.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.4-16" date="1715256000">- libmnl: zero attribute padding</changelog>
</package>
<package pkgid="9e0e76a99ccd11e92d7269bb82a7b81c09db79c0ce55ea888c160262e3baaa25" name="libmodulemd-debuginfo" arch="i686">
  <version epoch="0" ver="2.13.0" rel="2.el9"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.1-1" date="1608206400">- Release 2.11.1
- Ignore Packager documents when running ModuleIndex.update_from_*()
- Add python overrides for XMD in PackagerV3
- Add python override to ignore the GType return when reading packager files
- Add PackagerV3.get_mdversion()</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-1" date="1610020800">- Release 2.11.2
- Extend read_packager_[file|string]() to support overriding the module name
  and stream.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-2" date="1610452800">- Fix issue with ModuleIndex when input contains only Obsoletes documents
- Fix import issue when built with Python 2 support</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.12.0-1" date="1610625600">- Add support for 'buildorder' to Packager documents</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.12.1-1" date="1620043200">- 2.12.1 bump (bug #1956346)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-1" date="1628596800">- 2.13.0 bump (bug #1984403)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-2" date="1628769600">- Enable accept_overflowed_buildorder in tier0 tests (bug #1984403)</changelog>
</package>
<package pkgid="fd8eb2c28a8d4bd936398ef49144d833f28e092cfad583ef30c6d08c6b8b6ade" name="libmodulemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="2.el9"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.1-1" date="1608206400">- Release 2.11.1
- Ignore Packager documents when running ModuleIndex.update_from_*()
- Add python overrides for XMD in PackagerV3
- Add python override to ignore the GType return when reading packager files
- Add PackagerV3.get_mdversion()</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-1" date="1610020800">- Release 2.11.2
- Extend read_packager_[file|string]() to support overriding the module name
  and stream.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-2" date="1610452800">- Fix issue with ModuleIndex when input contains only Obsoletes documents
- Fix import issue when built with Python 2 support</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.12.0-1" date="1610625600">- Add support for 'buildorder' to Packager documents</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.12.1-1" date="1620043200">- 2.12.1 bump (bug #1956346)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-1" date="1628596800">- 2.13.0 bump (bug #1984403)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-2" date="1628769600">- Enable accept_overflowed_buildorder in tier0 tests (bug #1984403)</changelog>
</package>
<package pkgid="61d7b031129d2d86a3077ec89e683bb1180899e5f684094cdc740a8359897cae" name="libmodulemd-debugsource" arch="i686">
  <version epoch="0" ver="2.13.0" rel="2.el9"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.1-1" date="1608206400">- Release 2.11.1
- Ignore Packager documents when running ModuleIndex.update_from_*()
- Add python overrides for XMD in PackagerV3
- Add python override to ignore the GType return when reading packager files
- Add PackagerV3.get_mdversion()</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-1" date="1610020800">- Release 2.11.2
- Extend read_packager_[file|string]() to support overriding the module name
  and stream.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-2" date="1610452800">- Fix issue with ModuleIndex when input contains only Obsoletes documents
- Fix import issue when built with Python 2 support</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.12.0-1" date="1610625600">- Add support for 'buildorder' to Packager documents</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.12.1-1" date="1620043200">- 2.12.1 bump (bug #1956346)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-1" date="1628596800">- 2.13.0 bump (bug #1984403)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-2" date="1628769600">- Enable accept_overflowed_buildorder in tier0 tests (bug #1984403)</changelog>
</package>
<package pkgid="1f27820bb5515d400a0474b62d238825fd309048b4163b5843312ab382782925" name="libmodulemd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="2.el9"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.1-1" date="1608206400">- Release 2.11.1
- Ignore Packager documents when running ModuleIndex.update_from_*()
- Add python overrides for XMD in PackagerV3
- Add python override to ignore the GType return when reading packager files
- Add PackagerV3.get_mdversion()</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-1" date="1610020800">- Release 2.11.2
- Extend read_packager_[file|string]() to support overriding the module name
  and stream.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.11.2-2" date="1610452800">- Fix issue with ModuleIndex when input contains only Obsoletes documents
- Fix import issue when built with Python 2 support</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.12.0-1" date="1610625600">- Add support for 'buildorder' to Packager documents</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.12.1-1" date="1620043200">- 2.12.1 bump (bug #1956346)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-1" date="1628596800">- 2.13.0 bump (bug #1984403)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.13.0-2" date="1628769600">- Enable accept_overflowed_buildorder in tier0 tests (bug #1984403)</changelog>
</package>
<package pkgid="74ba0efa3d804dc84c8264fc3591e05181866574acb1288518036c19a4755ebd" name="libmount-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="3989f6edf5e95437c89605fb4a8d10c32344cdad11eaadabfbc3bdf9ebafa429" name="libmount-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="8d9c16b09321780529e6913a7e5ce38987b572cdcb282b504d17bbf544892c78" name="libndp-debuginfo" arch="i686">
  <version epoch="0" ver="1.9" rel="1.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.8-5" date="1700049600">- Convert the license tag to SPDX format
  Related: RHELMISC-1363</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
</package>
<package pkgid="3d2b08c1294b9cfa1840b2e21551bebefce78c09d97d33cb8e2f2f6dfd434566" name="libndp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9" rel="1.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.8-5" date="1700049600">- Convert the license tag to SPDX format
  Related: RHELMISC-1363</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
</package>
<package pkgid="b058d67470f64239deee2dc2a6884794035c86287164dcf18b876c8d39d0c743" name="libndp-debugsource" arch="i686">
  <version epoch="0" ver="1.9" rel="1.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.8-5" date="1700049600">- Convert the license tag to SPDX format
  Related: RHELMISC-1363</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
</package>
<package pkgid="8fd46ff98f403beef8bfdd51d8962b0a23bd43ce92311db1e07be9db5dd3be87" name="libndp-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9" rel="1.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.8-5" date="1700049600">- Convert the license tag to SPDX format
  Related: RHELMISC-1363</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
</package>
<package pkgid="5b878c3be047619e214d6cb191d8463b149c3650efe130e98d753201d836d70f" name="libnetapi-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="7c818d2169f6f269a4468deb9195e900761b0c040d9a07c9aedf898e83ec7455" name="libnetapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="7aaf68f67edcf82acf0a9337ead07ec8bf78a0fbf9d9f09d2ad57fa43b196632" name="libnetapi-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="7a722c9a89320b6c61e4654aa1c623618d2596a42cb52e8ede2a6ad6542c21e4" name="libnetapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="ced9132eb4d1a09cb1b748fbeb7162de8123d7fbeee266ea44a46f8a4a860d26" name="libnetapi-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="e41dcc106a02d065b213aea934d386ff020944cb920669c1277df69279fa138e" name="libnetapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="f800b2e41db90ee14712992618c14139dc889b22cf4a8c8f6e26a3147f53ba00" name="libnetfilter_conntrack-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.8-1" date="1610884800">- Update to 1.0.8
- Cleanup spec</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.8-5" date="1670414400">- conntrack: don't cancel nest on unknown layer 4 protocols</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-1" date="1670500800">- expect/conntrack: Avoid spurious covscan overrun warning
- conntrack: fix build with kernel 5.15 and musl
- New version 1.0.9</changelog>
</package>
<package pkgid="6cad5752f568fef060037b6ac0ca1f72e6f7dfd82d6b03b1114bd0a51b2a9413" name="libnetfilter_conntrack-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.8-1" date="1610884800">- Update to 1.0.8
- Cleanup spec</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.8-5" date="1670414400">- conntrack: don't cancel nest on unknown layer 4 protocols</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-1" date="1670500800">- expect/conntrack: Avoid spurious covscan overrun warning
- conntrack: fix build with kernel 5.15 and musl
- New version 1.0.9</changelog>
</package>
<package pkgid="1841c4c22257caa346eee18378c422da187f52501925fa1a8120acf59d52b1a6" name="libnetfilter_conntrack-debugsource" arch="i686">
  <version epoch="0" ver="1.0.9" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.8-1" date="1610884800">- Update to 1.0.8
- Cleanup spec</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.8-5" date="1670414400">- conntrack: don't cancel nest on unknown layer 4 protocols</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-1" date="1670500800">- expect/conntrack: Avoid spurious covscan overrun warning
- conntrack: fix build with kernel 5.15 and musl
- New version 1.0.9</changelog>
</package>
<package pkgid="6d31a56ec7ff23284b738a1f59afbee6b9908b9934ed9f9f98602f6026af5e30" name="libnetfilter_conntrack-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.8-1" date="1610884800">- Update to 1.0.8
- Cleanup spec</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.8-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.8-5" date="1670414400">- conntrack: don't cancel nest on unknown layer 4 protocols</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-1" date="1670500800">- expect/conntrack: Avoid spurious covscan overrun warning
- conntrack: fix build with kernel 5.15 and musl
- New version 1.0.9</changelog>
</package>
<package pkgid="1896d7e92cfec906bc0db3b466149ede77539d685b9154938d910f352ac65301" name="libnfnetlink-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.1" rel="23.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-22" date="1715169600">- libnfnetlink: Check getsockname() return code
- include: Silence gcc warning in linux_list.h</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-23" date="1732276800">- Bump release for CI</changelog>
</package>
<package pkgid="369bab3ce35c4d57d3e4570401ab797012bcf6cd798c58225da217168bd9db4d" name="libnfnetlink-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="23.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-22" date="1715169600">- libnfnetlink: Check getsockname() return code
- include: Silence gcc warning in linux_list.h</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-23" date="1732276800">- Bump release for CI</changelog>
</package>
<package pkgid="a610c4b944981de4de25a1e82f0858ca7756eceb1bbd899d87dcbff943b95bba" name="libnfnetlink-debugsource" arch="i686">
  <version epoch="0" ver="1.0.1" rel="23.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-22" date="1715169600">- libnfnetlink: Check getsockname() return code
- include: Silence gcc warning in linux_list.h</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-23" date="1732276800">- Bump release for CI</changelog>
</package>
<package pkgid="d4c45251aeb6bc2e4e3bfbe7c82174aaa9cf5cb90d6f3108b6c4c9380a508478" name="libnfnetlink-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="23.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-22" date="1715169600">- libnfnetlink: Check getsockname() return code
- include: Silence gcc warning in linux_list.h</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-23" date="1732276800">- Bump release for CI</changelog>
</package>
<package pkgid="edab95b8a9211d9a54eb16480d4015f2af8221d591207f68ffb78ec8a1220ffe" name="libnfsidmap-debuginfo" arch="i686">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="33386423918f97503815f45ea6c330f269c6cd4e8c89e8535cee13da5161b578" name="libnfsidmap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="f96171d6d0acedda207f9d018b294d628f68ff3aa9d6ab46066eeb8550a0a1c1" name="libnftnl-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.6" rel="4.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.1-1" date="1652875200">- Fix debug printing for tcp option reset expression
- new version 1.2.1</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.2-1" date="1654603200">- New version 1.2.2</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-1.el9]" date="1698321600">- set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
- Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-2.el9]" date="1698408000">- spec: Avoid variable name clash, add missing dist tag (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-3.el9]" date="1715169600">- tests: Fix objref test case (Phil Sutter) [RHEL-28515]
- expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
- obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
- obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
- obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
- obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
- obj: Return value on setters (Phil Sutter) [RHEL-28515]
- object: getters take const struct (Phil Sutter) [RHEL-28515]
- utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
- obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
- obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
- set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
- obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
- flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
- chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
- expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
- expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
- include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
- expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
- expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
- udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
- obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
- set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
- set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
- expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-4.el9]" date="1715256000">- Bump release for side-tag build with fixed libmnl (Phil Sutter) [RHEL-28515]</changelog>
</package>
<package pkgid="a956c40466290f2e8036ae0b9f02c158b8f2a608bfbc1930da772e8abe245d1f" name="libnftnl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="4.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.1-1" date="1652875200">- Fix debug printing for tcp option reset expression
- new version 1.2.1</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.2-1" date="1654603200">- New version 1.2.2</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-1.el9]" date="1698321600">- set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
- Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-2.el9]" date="1698408000">- spec: Avoid variable name clash, add missing dist tag (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-3.el9]" date="1715169600">- tests: Fix objref test case (Phil Sutter) [RHEL-28515]
- expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
- obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
- obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
- obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
- obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
- obj: Return value on setters (Phil Sutter) [RHEL-28515]
- object: getters take const struct (Phil Sutter) [RHEL-28515]
- utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
- obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
- obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
- set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
- obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
- flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
- chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
- expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
- expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
- include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
- expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
- expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
- udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
- obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
- set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
- set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
- expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-4.el9]" date="1715256000">- Bump release for side-tag build with fixed libmnl (Phil Sutter) [RHEL-28515]</changelog>
</package>
<package pkgid="1311c8fa38019c0e9c696b0963ce5c90cf19cdc4199eb1cbeef70f67fdf64879" name="libnftnl-debugsource" arch="i686">
  <version epoch="0" ver="1.2.6" rel="4.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.1-1" date="1652875200">- Fix debug printing for tcp option reset expression
- new version 1.2.1</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.2-1" date="1654603200">- New version 1.2.2</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-1.el9]" date="1698321600">- set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
- Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-2.el9]" date="1698408000">- spec: Avoid variable name clash, add missing dist tag (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-3.el9]" date="1715169600">- tests: Fix objref test case (Phil Sutter) [RHEL-28515]
- expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
- obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
- obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
- obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
- obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
- obj: Return value on setters (Phil Sutter) [RHEL-28515]
- object: getters take const struct (Phil Sutter) [RHEL-28515]
- utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
- obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
- obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
- set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
- obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
- flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
- chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
- expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
- expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
- include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
- expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
- expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
- udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
- obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
- set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
- set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
- expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-4.el9]" date="1715256000">- Bump release for side-tag build with fixed libmnl (Phil Sutter) [RHEL-28515]</changelog>
</package>
<package pkgid="521f9fb37d9795a9dca233cb9e9188b7413210380abbbe75aff2a0915c509427" name="libnftnl-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="4.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.1-1" date="1652875200">- Fix debug printing for tcp option reset expression
- new version 1.2.1</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.2.2-1" date="1654603200">- New version 1.2.2</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-1.el9]" date="1698321600">- set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
- Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-2.el9]" date="1698408000">- spec: Avoid variable name clash, add missing dist tag (Phil Sutter) [RHEL-14149]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-3.el9]" date="1715169600">- tests: Fix objref test case (Phil Sutter) [RHEL-28515]
- expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
- obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
- obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
- obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
- obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
- obj: Return value on setters (Phil Sutter) [RHEL-28515]
- object: getters take const struct (Phil Sutter) [RHEL-28515]
- utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
- obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
- obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
- set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
- obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
- flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
- chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
- expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
- expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
- include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
- expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
- expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
- udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
- obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
- set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
- set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
- expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.6-4.el9]" date="1715256000">- Bump release for side-tag build with fixed libmnl (Phil Sutter) [RHEL-28515]</changelog>
</package>
<package pkgid="8a957807a34c0e67077786f24362002e6bd61b56e31306279137bcc51fb8b660" name="libnghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="e520130eff24f5d52666e37d80104a41a7c9163a6250751f792f2c77ae56102b" name="libnghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="a9a84533ff3b57835daed82a44c67ac537ab74f77732f38ded10e8827f8771aa" name="libnghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="a1b0dd35e6019263b1c5efb8d258df34851deec5531b87d0b85b72566d579b3c" name="libnghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="c3752e91c2a7ea6864fbaba750f4b023ab5d9163aedeb9983db6238849727bb5" name="libnl3-cli-debuginfo" arch="i686">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="a9ceb2aeb757b0d1df705c74b622c15e808a61427010e73259fcfbcbaf03f8ac" name="libnl3-cli-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="93930cfab00245be2dceeabfbc82218631740668be828e5c77785fb67c1577eb" name="libnl3-debuginfo" arch="i686">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="2f7553c3d84131f56fdb131cca44d4ff53bc235ff80a2ffd4dc6cd57ae279e74" name="libnl3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="ed48e25444f1ef0112d651144c01cb874b91785f0c4d743542b18cd14bb12982" name="libnl3-debugsource" arch="i686">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="d2b614e91d432ec336f373080bd0c87205b16be7fd2acbc1a1b3a17915839a3e" name="libnl3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="17bba7424d227886cefdf5900ff78c14998e596360d8d248e1df3e0e6e766f02" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="3b61c85bc056e39ecde199d04fb08a898e889b6bb9c6e35e123595e5a3852af0" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="865c683d9be1ab3b54633a0341986eb168eea5d3c308e63edad04c9db43b32e4" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="aacd2d612620399c5998a84c47f627812cd8d023cce3841fffe5639049cd6e6f" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="16f6546880769a8bc8f892de50bef78a540d3ef086ad478299228778c65f2d32" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="97a2d1d984b77f570b0c056e444607d1444ab3644be7c28804863d5c5e6ffb50" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="19f08488d7dd8c591f3c895b3954651af86dd6da67a1c16afbd08aa194183f8b" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="b01c302bc984293f3f7fdfb3142574ea3828be3924d3d836900bf6016a9973be" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="b0acb2402309806c834e146cc99b7001e3bf63a998afc5d13994a247fda1a2a3" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="cc6d8086d5c6b4dbb39991d60c6bcecc46005166bdad94671e94931f7b919d9a" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="ef66a35e38b0e888c3e662fb56851d0c830cae357186da511ff4967f5f345d44" name="libnvme-debuginfo" arch="i686">
  <version epoch="0" ver="1.16.1" rel="3.el9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="7af28107b77065422c68bd1015187cdd162477e00f291d5c75cb1d6908ff5d90" name="libnvme-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.el9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="aa88da55ba71bb09e44c3390f0cde1ae3f7ac072db29c9f694998de7dcba5c67" name="libnvme-debugsource" arch="i686">
  <version epoch="0" ver="1.16.1" rel="3.el9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="4f60455fdbfc792fe92bf61db5f1d07614d029f235b339d6bd11171d3e20bc94" name="libnvme-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.el9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="da35cbc5358edc09d73d3d412230dc9a71182cef158f89d2f82ba95886fdd6d0" name="libpath_utils-debuginfo" arch="i686">
  <version epoch="0" ver="0.2.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="51d5bc68f14bd003b17f3146eb895c1c23fec928d20ac1e4e509195376ed8bd4" name="libpath_utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.2.1" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="fa91846989569a0171bb7c7802c6313463da8f161a21d664497af461d68a270b" name="libpcap-debuginfo" arch="i686">
  <version epoch="14" ver="1.10.0" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-3" date="1582545600">- libpcap should print an error on wrong IPv4 address</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 14:1.9.1-4" date="1589544000">- Enabling rdma support in libpcap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-6" date="1602504000">- Using make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-1" date="1613044800">- New version 1.10.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-3" date="1627300800">- Resolves: #1938778 - review of important potential issues detected by static analyzers in libpcap</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bf19e3d1f934e67c22a1dfac3c774c8cfd8b76b3ed1824d8ade0398738527133" name="libpcap-debuginfo" arch="x86_64">
  <version epoch="14" ver="1.10.0" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-3" date="1582545600">- libpcap should print an error on wrong IPv4 address</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 14:1.9.1-4" date="1589544000">- Enabling rdma support in libpcap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-6" date="1602504000">- Using make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-1" date="1613044800">- New version 1.10.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-3" date="1627300800">- Resolves: #1938778 - review of important potential issues detected by static analyzers in libpcap</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d3cb5772f536de6daa0a60242507467b1461495e287bdb6da2bec409a6fac14c" name="libpcap-debugsource" arch="i686">
  <version epoch="14" ver="1.10.0" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-3" date="1582545600">- libpcap should print an error on wrong IPv4 address</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 14:1.9.1-4" date="1589544000">- Enabling rdma support in libpcap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-6" date="1602504000">- Using make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-1" date="1613044800">- New version 1.10.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-3" date="1627300800">- Resolves: #1938778 - review of important potential issues detected by static analyzers in libpcap</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8ebb8532475f2bc30009d119ca2d1058da91e2e8000ed257154dab61ccfb9130" name="libpcap-debugsource" arch="x86_64">
  <version epoch="14" ver="1.10.0" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-3" date="1582545600">- libpcap should print an error on wrong IPv4 address</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 14:1.9.1-4" date="1589544000">- Enabling rdma support in libpcap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.9.1-6" date="1602504000">- Using make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.9.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-1" date="1613044800">- New version 1.10.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.0-3" date="1627300800">- Resolves: #1938778 - review of important potential issues detected by static analyzers in libpcap</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 14:1.10.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6d133a9323864c9d979302045e3f360e40bbe8e30c593fd28086acc488e5665c" name="libpciaccess-debuginfo" arch="i686">
  <version epoch="0" ver="0.16" rel="7.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-7" date="1710936000">- Fix findings from static application security testing (SAST)
  Resolves: https://issues.redhat.com/browse/RHEL-29753</changelog>
</package>
<package pkgid="830670c34b616e2aeeba91d1090df1d33b5cc0700ffd78ea50f1bda1dcf992e3" name="libpciaccess-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16" rel="7.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-7" date="1710936000">- Fix findings from static application security testing (SAST)
  Resolves: https://issues.redhat.com/browse/RHEL-29753</changelog>
</package>
<package pkgid="82471403ee756051047d34ddb2d3a7f0c3a2c6f8641d559213d83dce7712fd99" name="libpciaccess-debugsource" arch="i686">
  <version epoch="0" ver="0.16" rel="7.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-7" date="1710936000">- Fix findings from static application security testing (SAST)
  Resolves: https://issues.redhat.com/browse/RHEL-29753</changelog>
</package>
<package pkgid="c46c5c31ca1261b13797cdbfb3727c5decf6c0eb12b8535ba18bd8b387bf12cf" name="libpciaccess-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16" rel="7.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-7" date="1710936000">- Fix findings from static application security testing (SAST)
  Resolves: https://issues.redhat.com/browse/RHEL-29753</changelog>
</package>
<package pkgid="cf664846b03ac292253e04fa532610a081ef52ea8c04a1ab445c9700048c15c0" name="libpeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.30.0" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.26.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.26.0-5" date="1596542400">+ libpeas-1.26.0-5
- Remove unused Python macro that caused errors on install (#1863667)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.28.0-1" date="1599912000">- Update to 1.28.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.30.0-1" date="1616414400">- Update to 1.30.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.30.0-3" date="1623412800">+ libpeas-1.30.0-3
- Correct license for some of the icons
- Resolves: rhbz#1971434</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="83ff7d8290a32c908fb1420f9aebbc0933440c99e6739fadfdfb554c4f6d3088" name="libpeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.30.0" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.26.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.26.0-5" date="1596542400">+ libpeas-1.26.0-5
- Remove unused Python macro that caused errors on install (#1863667)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.28.0-1" date="1599912000">- Update to 1.28.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.30.0-1" date="1616414400">- Update to 1.30.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.30.0-3" date="1623412800">+ libpeas-1.30.0-3
- Correct license for some of the icons
- Resolves: rhbz#1971434</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6352f7b02a03611246dc680a2f3575887dfc44ecb1e33135a7bd3477328fa500" name="libpeas-debugsource" arch="i686">
  <version epoch="0" ver="1.30.0" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.26.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.26.0-5" date="1596542400">+ libpeas-1.26.0-5
- Remove unused Python macro that caused errors on install (#1863667)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.28.0-1" date="1599912000">- Update to 1.28.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.30.0-1" date="1616414400">- Update to 1.30.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.30.0-3" date="1623412800">+ libpeas-1.30.0-3
- Correct license for some of the icons
- Resolves: rhbz#1971434</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="294cfbc64348bd9349c5f50b2f53f7c7e927c1010a8e7512dd152ece8411e13d" name="libpeas-debugsource" arch="x86_64">
  <version epoch="0" ver="1.30.0" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.26.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.0-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.26.0-5" date="1596542400">+ libpeas-1.26.0-5
- Remove unused Python macro that caused errors on install (#1863667)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.28.0-1" date="1599912000">- Update to 1.28.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.30.0-1" date="1616414400">- Update to 1.30.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.30.0-3" date="1623412800">+ libpeas-1.30.0-3
- Correct license for some of the icons
- Resolves: rhbz#1971434</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="00867ed14fee15fc4009bb3a3bebe69188b51888a981965fc9810f10cc717aca" name="libpipeline-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.3" rel="4.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.2-1" date="1578484800">- update to 1.5.2
  resolves #1787794</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.5.2-3" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.3-1" date="1597665600">- update to 1.5.3
  resolves: #1868648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e3ed3599f56b574f7c97d5cc19ed127cfb8df97d57a47ef35c657a96969d2e8e" name="libpipeline-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="4.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.2-1" date="1578484800">- update to 1.5.2
  resolves #1787794</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.5.2-3" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.3-1" date="1597665600">- update to 1.5.3
  resolves: #1868648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c48953d132af76e5e9cf0e198d86b90b9be42ffb9b04ddc190af4a13329c37cb" name="libpipeline-debugsource" arch="i686">
  <version epoch="0" ver="1.5.3" rel="4.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.2-1" date="1578484800">- update to 1.5.2
  resolves #1787794</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.5.2-3" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.3-1" date="1597665600">- update to 1.5.3
  resolves: #1868648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3df3bed919bcdc2c0030a7e3c64ca9db1478372667c9793ce2051ef6a3717741" name="libpipeline-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="4.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.2-1" date="1578484800">- update to 1.5.2
  resolves #1787794</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.5.2-3" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.3-1" date="1597665600">- update to 1.5.3
  resolves: #1868648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f971c923e321c7eab082b96c4c3268e13b66bcbeaa653ab01e498834859952cc" name="libpkgconf-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="f3caec3225fe6a28f2f726de46c0056372bc05da7cf6c45e2ae6665b69bf988e" name="libpkgconf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="47a29cc3ed1a10e6ac7d45a3b0ea152f70abebc361ec8b9fe502f27f3226af41" name="libpng-debuginfo" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="249ce4fe72870f66d9502f59986e48a2a7d635961baf68234c60d3b8c927ef5d" name="libpng-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="c10fd9b823208b2f9b00b19c37285a6fdea79bc12b2f7bb0f4f4fe60ab9fdb9a" name="libpng-debuginfo" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="c16dc9b920fa763192cf010f5982064b8330a46a254f3b55ff689da5806c9445" name="libpng-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="2574f8edd4588880ae574dbce4ecd0788beed3c0c58516789dd0db4d006d51eb" name="libpng-debugsource" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="08fa7db9212a285a4432e805e0a0fd2c0f26e1dfd716a4ead5721ed70c061db5" name="libpng-debugsource" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="57872a1ed59fd7507a6535ac5e991fb133e4fd0e9192c996c49b7cb007439785" name="libpng-debugsource" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="462aebb7fbd9fbacc8b77148d335f6de4b73ca19e3d278fb39f5be9e435bd4af" name="libpng-debugsource" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="22fdc35b3c592c35405a07240298383f3f353518907c41618df2bb3849a5cd7c" name="libproxy-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.15" rel="35.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-26" date="1601380800">- Fix PAC buffer overflow (#1883584)</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 0.4.15-27" date="1601985600">- Disable mozjs backend by default, obsolete it by webkit subpackage</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-28" date="1606737600">- Depend on KDE only on Fedora (#1902608)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-29" date="1606737601">- Tweak KDE conditionals to only apply at runtime</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.15-30" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-31" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-32" date="1627387200">- Add Copyright.txt. Resolves: rhbz#1986586</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-33" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-34" date="1629288000">- Drop pacrunner subpackage. Resolves: rhbz#1990974</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-35" date="1629892800">- Drop networkmanager subpackage. Resolves: rhbz#1996028</changelog>
</package>
<package pkgid="a963f6bad2f828b13de91a74fb8ef27b5940490925aa8d857c2a3657f4757cc5" name="libproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="35.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-26" date="1601380800">- Fix PAC buffer overflow (#1883584)</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 0.4.15-27" date="1601985600">- Disable mozjs backend by default, obsolete it by webkit subpackage</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-28" date="1606737600">- Depend on KDE only on Fedora (#1902608)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-29" date="1606737601">- Tweak KDE conditionals to only apply at runtime</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.15-30" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-31" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-32" date="1627387200">- Add Copyright.txt. Resolves: rhbz#1986586</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-33" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-34" date="1629288000">- Drop pacrunner subpackage. Resolves: rhbz#1990974</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-35" date="1629892800">- Drop networkmanager subpackage. Resolves: rhbz#1996028</changelog>
</package>
<package pkgid="442e3253d5c799a9ce2ee6fd71a4e98c3db384cb303d12ddf9f3dbd2298137e0" name="libproxy-debugsource" arch="i686">
  <version epoch="0" ver="0.4.15" rel="35.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-26" date="1601380800">- Fix PAC buffer overflow (#1883584)</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 0.4.15-27" date="1601985600">- Disable mozjs backend by default, obsolete it by webkit subpackage</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-28" date="1606737600">- Depend on KDE only on Fedora (#1902608)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-29" date="1606737601">- Tweak KDE conditionals to only apply at runtime</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.15-30" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-31" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-32" date="1627387200">- Add Copyright.txt. Resolves: rhbz#1986586</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-33" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-34" date="1629288000">- Drop pacrunner subpackage. Resolves: rhbz#1990974</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-35" date="1629892800">- Drop networkmanager subpackage. Resolves: rhbz#1996028</changelog>
</package>
<package pkgid="234c9d40699bc565edf5676b828c65938ea22f513c278e8b8ba261b35b3de899" name="libproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="35.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-26" date="1601380800">- Fix PAC buffer overflow (#1883584)</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 0.4.15-27" date="1601985600">- Disable mozjs backend by default, obsolete it by webkit subpackage</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-28" date="1606737600">- Depend on KDE only on Fedora (#1902608)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.15-29" date="1606737601">- Tweak KDE conditionals to only apply at runtime</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.15-30" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-31" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-32" date="1627387200">- Add Copyright.txt. Resolves: rhbz#1986586</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.15-33" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-34" date="1629288000">- Drop pacrunner subpackage. Resolves: rhbz#1990974</changelog>
  <changelog author="Michael Santana &lt;msantana@redhat.com&gt; - 0.4.15-35" date="1629892800">- Drop networkmanager subpackage. Resolves: rhbz#1996028</changelog>
</package>
<package pkgid="fa5207acf893558183de371d1d5cb28385274f6d0816708caf586b21d6699aa3" name="libpsl-debuginfo" arch="i686">
  <version epoch="0" ver="0.21.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.0-4" date="1580385600">- fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.1-1" date="1595246400">- update to 0.21.1 (#1858489)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="04c9dff58e4896b3194e2e6d2d540650278ede971ef72e59d59cb797432e2dec" name="libpsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.21.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.0-4" date="1580385600">- fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.1-1" date="1595246400">- update to 0.21.1 (#1858489)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fbb2b7d6622be32cb4532f504432480add61180958a45825cc5b443852a23745" name="libpsl-debugsource" arch="i686">
  <version epoch="0" ver="0.21.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.0-4" date="1580385600">- fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.1-1" date="1595246400">- update to 0.21.1 (#1858489)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="73887d10f27113513c45a78cfda687c2255d9da2fd2c965b0283e21c74c8ae68" name="libpsl-debugsource" arch="x86_64">
  <version epoch="0" ver="0.21.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.0-4" date="1580385600">- fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.1-1" date="1595246400">- update to 0.21.1 (#1858489)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fca2e2039d157a8ade8adf132b50e511da534c9acbf96852588642a254e9eb2c" name="libpwquality-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.4" rel="8.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.4.2-4" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.3-1" date="1602504000">- Multiple translation updates
- Add usersubstr check for substrings of N characters from the username
  patch by Danny Sauer</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.4-1" date="1602590400">- Translation updates
- Fix regression with enabling the cracklib check during build</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1611676514">- Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-4" date="1619697600">- cracklib-dicts is a hard requirement, not a recomendation.
- Resolves rhbz#1947882</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-5" date="1627300800">- added i18n updates for de, fr, ja, ko, zh_CN
- Resolves: rhbz#1963858
- Resolves: rhbz#1938621</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-6" date="1627300801">- rebuilt</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-7" date="1628078400">- Explicitly rebuild the localization
- Resolves: rhbz#1938621</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2bba05ec6a9d39b334fb0ed354ac9d1c79d284041bde7b974cacc9c96ee48d53" name="libpwquality-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="8.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.4.2-4" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.3-1" date="1602504000">- Multiple translation updates
- Add usersubstr check for substrings of N characters from the username
  patch by Danny Sauer</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.4-1" date="1602590400">- Translation updates
- Fix regression with enabling the cracklib check during build</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1611676514">- Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-4" date="1619697600">- cracklib-dicts is a hard requirement, not a recomendation.
- Resolves rhbz#1947882</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-5" date="1627300800">- added i18n updates for de, fr, ja, ko, zh_CN
- Resolves: rhbz#1963858
- Resolves: rhbz#1938621</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-6" date="1627300801">- rebuilt</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-7" date="1628078400">- Explicitly rebuild the localization
- Resolves: rhbz#1938621</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="393900e8c682147a8cda8e292809aadb13bbd516bce961172ddb183758d98a58" name="libpwquality-debugsource" arch="i686">
  <version epoch="0" ver="1.4.4" rel="8.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.4.2-4" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.3-1" date="1602504000">- Multiple translation updates
- Add usersubstr check for substrings of N characters from the username
  patch by Danny Sauer</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.4-1" date="1602590400">- Translation updates
- Fix regression with enabling the cracklib check during build</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1611676514">- Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-4" date="1619697600">- cracklib-dicts is a hard requirement, not a recomendation.
- Resolves rhbz#1947882</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-5" date="1627300800">- added i18n updates for de, fr, ja, ko, zh_CN
- Resolves: rhbz#1963858
- Resolves: rhbz#1938621</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-6" date="1627300801">- rebuilt</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-7" date="1628078400">- Explicitly rebuild the localization
- Resolves: rhbz#1938621</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="394f25b344de42e989550a8618df3749d3daa6989f8050087cbe7d653a5e0048" name="libpwquality-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="8.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.4.2-4" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.3-1" date="1602504000">- Multiple translation updates
- Add usersubstr check for substrings of N characters from the username
  patch by Danny Sauer</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.4-1" date="1602590400">- Translation updates
- Fix regression with enabling the cracklib check during build</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1611676514">- Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-4" date="1619697600">- cracklib-dicts is a hard requirement, not a recomendation.
- Resolves rhbz#1947882</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-5" date="1627300800">- added i18n updates for de, fr, ja, ko, zh_CN
- Resolves: rhbz#1963858
- Resolves: rhbz#1938621</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-6" date="1627300801">- rebuilt</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.4-7" date="1628078400">- Explicitly rebuild the localization
- Resolves: rhbz#1938621</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e9d2ead9fc20b8990190b1e760c5737ff0d1b7653081ff91fd90f80029685b9c" name="libqmi-debuginfo" arch="i686">
  <version epoch="0" ver="1.34.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-1" date="1741262400">- Update to 1.34.0</changelog>
</package>
<package pkgid="d8ee25f42668aa3b6109849af793f07a08925182712fe1719d704c2eaef0d3c6" name="libqmi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-1" date="1741262400">- Update to 1.34.0</changelog>
</package>
<package pkgid="ea05e5cf907622ef890a88e4a7d71c757ef182170b630f45ed1ff27ee4ef9f0d" name="libqmi-debugsource" arch="i686">
  <version epoch="0" ver="1.34.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-1" date="1741262400">- Update to 1.34.0</changelog>
</package>
<package pkgid="aad7de758156f96c594a3ff505c8a6465064a5adfb8a0b45976c14b3c44291d7" name="libqmi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-1" date="1741262400">- Update to 1.34.0</changelog>
</package>
<package pkgid="d1b9551affba8497c1b02d6541f3ed6f83fc18ed28a5ffaf72d3cd8127d1d0b1" name="libqmi-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-1" date="1741262400">- Update to 1.34.0</changelog>
</package>
<package pkgid="7df12c07d65e277b754f6c85bce12ab7ded565a234669de007388f7122c5ac5d" name="libqrtr-glib-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.0-1" date="1618315200">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.0.0-3" date="1636027200">- Import the fedora 35 srpm to CentOS 9 stream.</changelog>
  <changelog author="Gris Ge &lt;fge@rehdat.com&gt; - 1.0.0-4" date="1639051200">- Rebuild with CI gating enabled</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
</package>
<package pkgid="a64df14beb148b12eebc2f450d590db2565466eead17509963eeeeb646acc717" name="libqrtr-glib-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.0-1" date="1618315200">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.0.0-3" date="1636027200">- Import the fedora 35 srpm to CentOS 9 stream.</changelog>
  <changelog author="Gris Ge &lt;fge@rehdat.com&gt; - 1.0.0-4" date="1639051200">- Rebuild with CI gating enabled</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
</package>
<package pkgid="00198f475209999a652a99fc30c34f455779c14dacb57fa357a42864170b58b1" name="libqrtr-glib-debugsource" arch="i686">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.0-1" date="1618315200">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.0.0-3" date="1636027200">- Import the fedora 35 srpm to CentOS 9 stream.</changelog>
  <changelog author="Gris Ge &lt;fge@rehdat.com&gt; - 1.0.0-4" date="1639051200">- Rebuild with CI gating enabled</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
</package>
<package pkgid="4eda046284878550389328e4d08fc7ab265ecb0e6a9efea021a79f88fa007e4b" name="libqrtr-glib-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.0-1" date="1618315200">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.0.0-3" date="1636027200">- Import the fedora 35 srpm to CentOS 9 stream.</changelog>
  <changelog author="Gris Ge &lt;fge@rehdat.com&gt; - 1.0.0-4" date="1639051200">- Rebuild with CI gating enabled</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
</package>
<package pkgid="21e7c49dac01531204a34b722c767b4cd66195d4d319a998f1a1b813b908f364" name="libquadmath-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="612e88aacfa3cf385be45ec2a38ebb54a4e9123655e4f8409e7cec12f56fe4dc" name="libquadmath-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="4e5781a2ad0fbaea7e806903017954bd296d6fb1a2648dc29bd08a1464e930bc" name="librdmacm-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="e28639444682e32545c4167128199a4d9f49abbda4a61c65f5bf0323e878cd31" name="librdmacm-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="52d8223dc9cc51b35377eca2bbf4ef3a363a5343b894a328d4713986b1a955e7" name="librdmacm-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="4d09598e9c23d9210aac241b005cd51f5ad9659753fe338e16b58f52b8ef0b44" name="libref_array-debuginfo" arch="i686">
  <version epoch="0" ver="0.1.5" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="302c85c90d42e00e13916e42cd3944e6616185988261304799ae585e127a0fc4" name="libref_array-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-45" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-46" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-47" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-48" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-49" date="1622548800">- Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.1-50" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-51" date="1628596800">- Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 0.6.1-52" date="1652270400">- Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB</changelog>
</package>
<package pkgid="a4d9f2cca6aa81fd4fbf85a261d3431e308be28520084baee1717731a751647f" name="librepo-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="b98119f63abbb087442835901ca67121865106c8e08ef978bc2e64e0be99698d" name="librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="35a081fd9d1515e997bba05be97500301cff98b39803aa3782b698db43e5ea37" name="librepo-debugsource" arch="i686">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="f6c5309facc5fdf8600afd292ae181f149c6138c10f91225ab30f01c110ce0ed" name="librepo-debugsource" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="6e25e6318677b4f6cb878d1db1e34390706019aa751ae87a47af897c8de8963d" name="librhsm-debuginfo" arch="i686">
  <version epoch="0" ver="0.0.3" rel="9.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-8" date="1700568000">- Correct a License tag to LGPLv2+ (RHEL-16103)
- Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-9" date="1712750400">- Fix memory leaks in parse_entitlement_data() (RHEL-25499)</changelog>
</package>
<package pkgid="f4c6dd69be1b386daa1e156a1092c3b55fa345995538ac6c5278ea3ed4349fac" name="librhsm-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.3" rel="9.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-8" date="1700568000">- Correct a License tag to LGPLv2+ (RHEL-16103)
- Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-9" date="1712750400">- Fix memory leaks in parse_entitlement_data() (RHEL-25499)</changelog>
</package>
<package pkgid="6af04e1f0f032deb374af96a7038730c60cf382c207e342776c286e8bed60eb3" name="librhsm-debugsource" arch="i686">
  <version epoch="0" ver="0.0.3" rel="9.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-8" date="1700568000">- Correct a License tag to LGPLv2+ (RHEL-16103)
- Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-9" date="1712750400">- Fix memory leaks in parse_entitlement_data() (RHEL-25499)</changelog>
</package>
<package pkgid="d504addd0719a045a69e5ae900aedf3f4e4266733876751db24724279e402c06" name="librhsm-debugsource" arch="x86_64">
  <version epoch="0" ver="0.0.3" rel="9.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-8" date="1700568000">- Correct a License tag to LGPLv2+ (RHEL-16103)
- Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-9" date="1712750400">- Fix memory leaks in parse_entitlement_data() (RHEL-25499)</changelog>
</package>
<package pkgid="f782610d2cd640537c04e09bafa63c7a6fe8fb8a453f02fac1c2b920b663db3e" name="libseccomp-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el9"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 2.4.2-1" date="1574251200">- New upstream version (#1765314)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.4.2-2" date="1576497600">- Modernize spec
- Backport fix for missing __SNR_ppoll symbol (#1777889)
- Refresh patch to build on aarch64 with upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-1" date="1595592000">- New upstream version (#1858965)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-3" date="1596628800">- Apply fixes to change internal handling of the notification fd (#1865802)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 2.5.2-2" date="1636113600">- fix devel-usability test
- rebase to 2.5.2
  resolves: rhbz#2019887</changelog>
</package>
<package pkgid="ddfbdf5d01b89841710edf572dd659937ba83e7e9cabaf9a9b44403f1a1efd1d" name="libseccomp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el9"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 2.4.2-1" date="1574251200">- New upstream version (#1765314)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.4.2-2" date="1576497600">- Modernize spec
- Backport fix for missing __SNR_ppoll symbol (#1777889)
- Refresh patch to build on aarch64 with upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-1" date="1595592000">- New upstream version (#1858965)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-3" date="1596628800">- Apply fixes to change internal handling of the notification fd (#1865802)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 2.5.2-2" date="1636113600">- fix devel-usability test
- rebase to 2.5.2
  resolves: rhbz#2019887</changelog>
</package>
<package pkgid="a94ad0f0065a93107196b70e9d438e92e54ab6eb6f89b81ac645eff2455a21fa" name="libseccomp-debugsource" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el9"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 2.4.2-1" date="1574251200">- New upstream version (#1765314)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.4.2-2" date="1576497600">- Modernize spec
- Backport fix for missing __SNR_ppoll symbol (#1777889)
- Refresh patch to build on aarch64 with upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-1" date="1595592000">- New upstream version (#1858965)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-3" date="1596628800">- Apply fixes to change internal handling of the notification fd (#1865802)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 2.5.2-2" date="1636113600">- fix devel-usability test
- rebase to 2.5.2
  resolves: rhbz#2019887</changelog>
</package>
<package pkgid="33959eea80740bbcf73e7cfc1e4de5ebf850a85d64b0e51ef3e990c19ac4bd92" name="libseccomp-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el9"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 2.4.2-1" date="1574251200">- New upstream version (#1765314)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.4.2-2" date="1576497600">- Modernize spec
- Backport fix for missing __SNR_ppoll symbol (#1777889)
- Refresh patch to build on aarch64 with upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-1" date="1595592000">- New upstream version (#1858965)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-3" date="1596628800">- Apply fixes to change internal handling of the notification fd (#1865802)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 2.5.2-2" date="1636113600">- fix devel-usability test
- rebase to 2.5.2
  resolves: rhbz#2019887</changelog>
</package>
<package pkgid="7da5a293933af31d12d1e2298e7f6024e6aeeddac21fa09e00c431dc5c541236" name="libselinux-debuginfo" arch="i686">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676376000">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- restorecon: Include &lt;selinux/label.h&gt; (RHEL-50821, RHEL-54385)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1738065600">- Close old selabel handle when setting a new one (RHEL-76472)</changelog>
</package>
<package pkgid="bce53d5562c77f34ae666b6f1e6fc41e4178485b1cfafe41b9a2d3e848a7ab0d" name="libselinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676376000">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- restorecon: Include &lt;selinux/label.h&gt; (RHEL-50821, RHEL-54385)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1738065600">- Close old selabel handle when setting a new one (RHEL-76472)</changelog>
</package>
<package pkgid="d6313031ebe19421b5973d9fb0add7ca131380cb88237714dd1b0e6047b66f18" name="libselinux-debugsource" arch="i686">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676376000">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- restorecon: Include &lt;selinux/label.h&gt; (RHEL-50821, RHEL-54385)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1738065600">- Close old selabel handle when setting a new one (RHEL-76472)</changelog>
</package>
<package pkgid="cc93c522989ef23d0551ef9f07e58193322409f808d7a6852f4fa47e3ea72158" name="libselinux-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676376000">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- restorecon: Include &lt;selinux/label.h&gt; (RHEL-50821, RHEL-54385)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1738065600">- Close old selabel handle when setting a new one (RHEL-76472)</changelog>
</package>
<package pkgid="91a9dd5ba12bf550d0afdf49f0998bb0f1c9b82b3dc658164289ee5bf0dec518" name="libselinux-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676376000">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- restorecon: Include &lt;selinux/label.h&gt; (RHEL-50821, RHEL-54385)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1738065600">- Close old selabel handle when setting a new one (RHEL-76472)</changelog>
</package>
<package pkgid="bd22740fee48e44b82376489ae65632e5de06440a5e2d4db874b97a0c0573959" name="libsemanage-debuginfo" arch="i686">
  <version epoch="0" ver="3.6" rel="5.el9_6"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-2" date="1679486400">- Include more parameters in the module checksum (#2173959)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1731067200">- open lock_file with O_RDWR (RHEL-60503)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-4" date="1738065600">- Set new restorecon handle before doing restorecon (RHEL-76472)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1740398400">- improve performance of semanage store rebuild (RHEL-79100)</changelog>
</package>
<package pkgid="81b92c312fc1485d53570da928892702725fffbbd56295ef0c4056d9616ddb74" name="libsemanage-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9_6"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-2" date="1679486400">- Include more parameters in the module checksum (#2173959)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1731067200">- open lock_file with O_RDWR (RHEL-60503)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-4" date="1738065600">- Set new restorecon handle before doing restorecon (RHEL-76472)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1740398400">- improve performance of semanage store rebuild (RHEL-79100)</changelog>
</package>
<package pkgid="753b8e87ccb3a2181af0ddd90e365b936a3122ab63722108a7ec756bc51873a6" name="libsemanage-debugsource" arch="i686">
  <version epoch="0" ver="3.6" rel="5.el9_6"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-2" date="1679486400">- Include more parameters in the module checksum (#2173959)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1731067200">- open lock_file with O_RDWR (RHEL-60503)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-4" date="1738065600">- Set new restorecon handle before doing restorecon (RHEL-76472)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1740398400">- improve performance of semanage store rebuild (RHEL-79100)</changelog>
</package>
<package pkgid="9dbe1555bd8ef2a1bccee0b68ef4010a81e951803acd68f904573d53ade69a13" name="libsemanage-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9_6"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-2" date="1679486400">- Include more parameters in the module checksum (#2173959)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1731067200">- open lock_file with O_RDWR (RHEL-60503)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-4" date="1738065600">- Set new restorecon handle before doing restorecon (RHEL-76472)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1740398400">- improve performance of semanage store rebuild (RHEL-79100)</changelog>
</package>
<package pkgid="26e0d91701620a33fcf06e931cc5dec8555f2826adbbb696c0ffab3526345c46" name="libsepol-debuginfo" arch="i686">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2" date="1736510400">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1742817600">- Fix static analyzer issues (RHEL-28966)</changelog>
</package>
<package pkgid="1aaff363b968482591b63e9f9afcb98623675b1f47478ab94399072dcba4706e" name="libsepol-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2" date="1736510400">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1742817600">- Fix static analyzer issues (RHEL-28966)</changelog>
</package>
<package pkgid="f618ab0403cf148ebc8a6173ccd8d79c122949680e3237d70ea8eaf28b8f9d12" name="libsepol-debugsource" arch="i686">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2" date="1736510400">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1742817600">- Fix static analyzer issues (RHEL-28966)</changelog>
</package>
<package pkgid="e1b01dbfa5a2e1993b5487bc528e84bf0dd2022b25dbccfd60574e80aa752e70" name="libsepol-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="3.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2" date="1736510400">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1742817600">- Fix static analyzer issues (RHEL-28966)</changelog>
</package>
<package pkgid="815efae6cce0ff98ec10d89005b0d4978be5d2c3e907fb8a3312f3598462995d" name="libsigsegv-debuginfo" arch="i686">
  <version epoch="0" ver="2.13" rel="4.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.11-9" date="1579262400">- Fix configure tests compromised by LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.13-1" date="1610884800">- Update to 2.13
- spec file cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e1b55763877ee593f6aaa4535117cfbdb13a3a6d718dc7c50c1ec9e9d7a808a3" name="libsigsegv-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13" rel="4.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.11-9" date="1579262400">- Fix configure tests compromised by LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.13-1" date="1610884800">- Update to 2.13
- spec file cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1431ec22ffed863f14f828ffc9b62fc1b395c7e3944bf3d01fc9ff9d393b7443" name="libsigsegv-debugsource" arch="i686">
  <version epoch="0" ver="2.13" rel="4.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.11-9" date="1579262400">- Fix configure tests compromised by LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.13-1" date="1610884800">- Update to 2.13
- spec file cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c2456f148d2af5654d72ffdf32e0344253e1493712030425a77b91b987f2f2a6" name="libsigsegv-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13" rel="4.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.11-9" date="1579262400">- Fix configure tests compromised by LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.13-1" date="1610884800">- Update to 2.13
- spec file cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d571b2d549f6ed5afb7120a2f8ca468be66ce49a7c32b63d0b61dbe24b953b7e" name="libsmartcols-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="133f634fcd43dd4fddca449aede31db50e4e69b1d628690c8cc14701917cbcbc" name="libsmartcols-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="ae8880b0f12904014b0ad7cab895e41c6d5beacb99ade5e782b7624543b99369" name="libsmbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="752495431de37460d69921f411fbd8f64d91a55020d13ca6ebfe0e401f2bddd0" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="b9dff5f3a480ec81425ee64f7c86011221233b86f79b10ac3f0371862ad86130" name="libsmbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="86f33dddc82fa1f8f6e8b28c0833988ce5adfc743d46da1deb4fb50da6369c1c" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="aadb6860d17e7c05a0db1b683140ec03eb72d1de0b33570cce892daaf95bbb1b" name="libsmbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="7e613ecea8d9db145138601ef51727403546b3546524cc5a20416d8437d5d7a4" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="4ef981d5002ca76062e0abe4eecfab20f77fcb678a719ea8b2c36dfb85cce6ac" name="libsmbios-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.3" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-5" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-6" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-8" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-10" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.4.3-1" date="1610884800">- Update to 2.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a8685784eaa7f86edd0cd8e477184c37326fc3057554bf4c157a55ef14d72f0e" name="libsmbios-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-5" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-6" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-8" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-10" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.4.3-1" date="1610884800">- Update to 2.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2a89601a8f8e65ae102c33a92f3c5ce66ea911dfd8ebedbb49707b45b5882118" name="libsmbios-debugsource" arch="i686">
  <version epoch="0" ver="2.4.3" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-5" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-6" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-8" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-10" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.4.3-1" date="1610884800">- Update to 2.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4bb0f54b2341d3225eea3ec55f3bfe8ca6ffacb8e4cfa5dd3be428684b594f3c" name="libsmbios-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-5" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-6" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.2-8" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-10" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.4.3-1" date="1610884800">- Update to 2.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f6cfc1dcaa8194838620c97f2a006bb989fdfeb96a32b70c60293f30485fadf3" name="libsolv-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="f00aac4bcf36b6b86685cc57537a25b737c4a970381fc0f76160b2149902b0b9" name="libsolv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="c8d2344b90427099b2b8e63022c01497d6450f94370b9d1bf0ce93ae1dc257a1" name="libsolv-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="00652bbe28f9e4f9ad19f18a0c2ceb5a99ca585dab156750d53dd8c72944c3b8" name="libsolv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="d5d9552a61004567da9aa3d2699ed9a01529ffdde5db1427d45f08801401ebb6" name="libsolv-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="26b525c34ffe3641dc854b866aa0c0cbf1f99262302a1b85dcf3fdc11cf5c9fc" name="libsolv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="b1262637ba01acdc942710046113377c2dac3395669b8d8689c286e437a433e0" name="libsolv-debugsource" arch="i686">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="1e155495e8b578ac103f7f507285913b62d3e3f83537b42faa924a26fe9c15b3" name="libsolv-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="6654b9dcf27a159c063e99312160f3d7ae62dd27a55f86b2816fccb388c95f5e" name="libsolv-debugsource" arch="i686">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="10ffdffe9f4f34517c6308e9ee868873c5d5d0ce637244a53ce0a1a4a17efb87" name="libsolv-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="b814841fc8fd5742ee23d1accc1385cacd07c4b9933faa7b6712c943a80dfa12" name="libsolv-debugsource" arch="i686">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="fb5776382449a4394f91a66832c7632319fb82b2f39319603f902372a034b8a6" name="libsolv-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="5f597f4251eb198715363064bebc8ae35c5e36803ee5ad5c4e61bd0e058342a4" name="libss-debuginfo" arch="i686">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="3fc4b126cb90956e40483d8fe18f2f3118e0c10d00203157363732a7d1c4402c" name="libss-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="767764c62b07a7c4550e11c549d7960694efd1a44918700c89c308c6994eb513" name="libssh-debuginfo" arch="i686">
  <version epoch="0" ver="0.10.4" rel="18.el9"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.4-13" date="1708344000">- Bump up the version so that the version in 9.3 is lower.
- Resolves: RHEL-19310, RHEL-19691, RHEL-17245</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
</package>
<package pkgid="aba5c263524025244a95fff93bf708cbb2e20ab49f55122c5cebf7d114969a20" name="libssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="18.el9"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.4-13" date="1708344000">- Bump up the version so that the version in 9.3 is lower.
- Resolves: RHEL-19310, RHEL-19691, RHEL-17245</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
</package>
<package pkgid="c4386cf0880de32b2fb9d2c72f091e8629a50a6cc2afe880427552044b1b99e0" name="libssh-debuginfo" arch="i686">
  <version epoch="0" ver="0.10.4" rel="19.el9_8"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-19" date="1785412800">- Backport CVE patches from 0.11.5
  Resolves: RHEL-213033
  Resolves: RHEL-213041
  Resolves: RHEL-213047
  Resolves: RHEL-213081
  Resolves: RHEL-213114
  Resolves: RHEL-213119
  Resolves: RHEL-213151</changelog>
</package>
<package pkgid="49da72d3749f4e04f44493d61c74d063d6911d10f4351646773989f3dfddea65" name="libssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="19.el9_8"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-19" date="1785412800">- Backport CVE patches from 0.11.5
  Resolves: RHEL-213033
  Resolves: RHEL-213041
  Resolves: RHEL-213047
  Resolves: RHEL-213081
  Resolves: RHEL-213114
  Resolves: RHEL-213119
  Resolves: RHEL-213151</changelog>
</package>
<package pkgid="e0b38b80ec94461d669006a12975e58516f17a9822613fa650aa85d8c3c94cb9" name="libssh-debugsource" arch="i686">
  <version epoch="0" ver="0.10.4" rel="18.el9"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.4-13" date="1708344000">- Bump up the version so that the version in 9.3 is lower.
- Resolves: RHEL-19310, RHEL-19691, RHEL-17245</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
</package>
<package pkgid="3c8bc15f6a7f8e15ccc48836d2c35b83149994c0eac54c33b7bb0e514b34fe18" name="libssh-debugsource" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="18.el9"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.4-13" date="1708344000">- Bump up the version so that the version in 9.3 is lower.
- Resolves: RHEL-19310, RHEL-19691, RHEL-17245</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
</package>
<package pkgid="54d7e7f7b709fe93f0ec3bd29db9848e36ab0be52503dae3006a4c96e3e0a7ca" name="libssh-debugsource" arch="i686">
  <version epoch="0" ver="0.10.4" rel="19.el9_8"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-19" date="1785412800">- Backport CVE patches from 0.11.5
  Resolves: RHEL-213033
  Resolves: RHEL-213041
  Resolves: RHEL-213047
  Resolves: RHEL-213081
  Resolves: RHEL-213114
  Resolves: RHEL-213119
  Resolves: RHEL-213151</changelog>
</package>
<package pkgid="b8f029d34e3cb5853103c9b336f3932480323eb097c40b68828934f4e1785613" name="libssh-debugsource" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="19.el9_8"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-19" date="1785412800">- Backport CVE patches from 0.11.5
  Resolves: RHEL-213033
  Resolves: RHEL-213041
  Resolves: RHEL-213047
  Resolves: RHEL-213081
  Resolves: RHEL-213114
  Resolves: RHEL-213119
  Resolves: RHEL-213151</changelog>
</package>
<package pkgid="0cc090d4c14586c309922beba7b893763fbb5b59079231b58525f480d6a90713" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="a1d77fe3d7cfdaff61cf7834207a7891addcc7d0a931eedfe83f054bf6b77c08" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="86999a982020ae4d957703ab72a4ff9e6b80535a4e412756ba2f449fb3cf0033" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="4b2f5a04795a7e0088c8808f3b3d8d9a4df20578f7aae88897fabf63b9a2f640" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="cbaec88ead4a81e605358747623cdba5fb0cc9d2f78cddfb55690b167c9e166f" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="b15a77f126a25557fb19625e2115318b6af28902dc37a5d245382f8f5b247f47" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="d476830a7af8190c2ba1df9e0d67ed56b0843502ca315991eab115997d5a610f" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="51ba602552a15a287d4b868ba3f2ef4b27869f333a8831c14b45375970219eda" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="78ee0b8982368ea7961ade849ab190f3065e5f1b655a66ede0a0dcad4935f352" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="f9edb794b25323141ebaf0c86ec85b6bb6c1af44e225da80c55fc305c044b55e" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="4b6e683e99f8944f4d35b5d0222bc624bee44bfd735ab8c7220018f10f11a975" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="40d318973a28f82f8f861c979ab01af348e912797ef6910ebacdcfbd10e3e0de" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="42d66540ab126636366d9cd18fcfabe47215525617341763c8f7fa9c60e98e89" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="ac9c87e468881dd52f03346eeca1070d3ff01765d89d1b37b479b6a21e7a7361" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="a09bf3916a022529cb0862b675084fd9ff38992b44d6360f80dc1e2a82527d2a" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="362e035e7916f8b319a98e84ae6fc77102f1229abdf1a6e736b28ed5443e50f0" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="8b187f078577a05a66c6338249912be83fdb1ca837bf7b97f9dd386dc14bb208" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="4c1d9e507c5b169a077ebae24eb4faa833d92ecfd531ab91e2687c76340a64c0" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="d59f736312ba2abbb19ad312a4342e57403778376b9029b0ae12869aae1b37b1" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="235a875bb8cb5b7a31e1a238ca4dacdef5de5f47a273764721d6760548118786" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="778081009b7fa3965aaa75d19e7e9029f0fb79bed6779853881b840196a93028" name="libstdc++-debuginfo" arch="i686">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="90485ebdd0fcde48ce13d30a00885b1c66f6f16f1b67039dcc466e9b96b97fec" name="libstdc++-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.5.0" rel="14.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.5.0-5" date="1738929600">- rebuild for CVE-2020-11023 (RHEL-78377)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
</package>
<package pkgid="fed7537b9bba736fb19c2f2b210e17c6b8e7a8faa79d21856542dcaec59704c3" name="libsysfs-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.1" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83777</changelog>
</package>
<package pkgid="41519316b2982d834915b53479ebaf7c83435ec5a0620bcb6808530e60b704e2" name="libsysfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83777</changelog>
</package>
<package pkgid="d904045da775f094518ef96daa1ced2559ffa19d1dc9b68c2a88513d66f849b5" name="libtalloc-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="b24fd0c409e3fb240c3d661fd5135228ba99083b51868af44389cd51c7bbe34e" name="libtalloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="531efa6bbdbe5688dfbe69960b8f5b8a57de0e2d33c942711cd889b7ea9d2fac" name="libtalloc-debugsource" arch="i686">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="735a651dc65f90c766f5099159b43df1393e39d0b98cf7cc9d8b7820fdb8757a" name="libtalloc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="dbe6713deb75c827dd5c9d0cb493e80bbca77d83ffc7344a8b7057a1c0a1558f" name="libtasn1-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="a926981bbd9145b189209a13536c00a3691a6d1b133628581e0d95f2e6d3c531" name="libtasn1-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="70f3ac49d6b6f0bbedf314fc825322124b1d6460e943afdef0adac9b21ff47e5" name="libtasn1-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.0" rel="9.el9"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
</package>
<package pkgid="939021b924060158f2ade8bfe4bd6e2f7ac6619df95a0aac815e0b1cf678ab36" name="libtasn1-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="9.el9"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
</package>
<package pkgid="01cb01837ba619a77f0a2dffad84beda3dab30eba53cfdf1eb0f6087c45a6894" name="libtasn1-debugsource" arch="i686">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="2599acadc1495f76297ce24f2f7695fec7168543aed16efd5bb3c2a091a81d75" name="libtasn1-debugsource" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="85a09067a9955d7c1798627afcbeba3e7da6f24bafb124db4ff2a9263a19bb96" name="libtasn1-debugsource" arch="i686">
  <version epoch="0" ver="4.16.0" rel="9.el9"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
</package>
<package pkgid="21b546c0f46237bf6b182074e4f7af899e72a474868301e89593320ac65e9ba4" name="libtasn1-debugsource" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="9.el9"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
</package>
<package pkgid="7f20d989f6e556b1bb396e09cac864c9f04fce2d00576383630b9cf59b0d7598" name="libtdb-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="8fcf07e5963413336610ccc9bf0de9302a3f9ecbb99ec9d2316026bb1141c9e4" name="libtdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="ed2ded51d3cdbf8e534415258d61d92d9ebc3ed2a4879ff84e7f72b944390d9c" name="libtdb-debugsource" arch="i686">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="8b0612b665a5faa0835da567c59386c5ea1ba2d6c71e407654e856fc04fbfc1c" name="libtdb-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="f8f8c6a8a234b20a1cfd98f09f25a6173b62d4063861e5ec0d503b9b618c40b9" name="libteam-debuginfo" arch="i686">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="d2534e447c837da61b70f6e561627e1e32ed3e5f568cf9b4a8ca1f0e6c1c69df" name="libteam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="3400e2d50b62ba69b0d2716df81ea2750914b2f143ae98ec73763d1f267c5d5e" name="libteam-debugsource" arch="i686">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="c722c9dd806f196101b0a6cecbd058ddcd8a008d7deb381d1ed9a859baa244c2" name="libteam-debugsource" arch="x86_64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="f99f5ad4d82720c79d607a5b09dc89e9f2ec3b7f1e4accab76121e0f1df04515" name="libtevent-debuginfo" arch="i686">
  <version epoch="0" ver="0.17.1" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1701691200">- resolves: RHEL-16481 - Rebase to version 0.16.0</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 0.16.1-1" date="1714046400">- resolves: RHEL-33755 - Rebase to version 0.16.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-1" date="1747656000">- Update to version 0.16.2
- resolves: RHEL-89881</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-1" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114550</changelog>
</package>
<package pkgid="d74c678103f692dee40e502e60c72aa9670b15092d9b96b3a324e8ecfb7a76b9" name="libtevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1701691200">- resolves: RHEL-16481 - Rebase to version 0.16.0</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 0.16.1-1" date="1714046400">- resolves: RHEL-33755 - Rebase to version 0.16.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-1" date="1747656000">- Update to version 0.16.2
- resolves: RHEL-89881</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-1" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114550</changelog>
</package>
<package pkgid="c9d3117b1b2ac29e351fe9d4b299a8b77151cd51d6955f5fe4cc91a42ffb12a4" name="libtevent-debugsource" arch="i686">
  <version epoch="0" ver="0.17.1" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1701691200">- resolves: RHEL-16481 - Rebase to version 0.16.0</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 0.16.1-1" date="1714046400">- resolves: RHEL-33755 - Rebase to version 0.16.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-1" date="1747656000">- Update to version 0.16.2
- resolves: RHEL-89881</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-1" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114550</changelog>
</package>
<package pkgid="7596e95f85cc218934781150a13bc87fa2f5909dc39ee8ab1a92572b96e227d9" name="libtevent-debugsource" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1701691200">- resolves: RHEL-16481 - Rebase to version 0.16.0</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 0.16.1-1" date="1714046400">- resolves: RHEL-33755 - Rebase to version 0.16.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-1" date="1747656000">- Update to version 0.16.2
- resolves: RHEL-89881</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-1" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114550</changelog>
</package>
<package pkgid="e0f2ae42f58eb728a3743a7a58cc9c187dac36173c55f76803dca5f22c3aea31" name="libtirpc-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.3" rel="9.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3" date="1660564800">- Rebased to libtirpc-1.3.3 (bz 2118157)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-1" date="1667476800">- bindresvport.c: fix a potential resource leakage (bz 2135405)
- clnt_raw.c: fix a possible null pointer dereference (bz 2138317)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-2" date="1684411200">- getnetconfigent: avoid potential DoS (bz 2150611)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-3" date="1704196800">- Null pointers so they are not used again (RHEL-11371)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.3-4" date="1708344000">- Add gating tests (rhel-7883)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-5" date="1709553600">- Fix rpc_gss_seccreate() usage of the passed in gss credential. (RHEL-27936)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-6" date="1709640000">- rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-7" date="1710331200">- exception build (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-8" date="1710849600">- rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-9" date="1722254400">- Support abstract addresses for rpcbind (RHEL-47027)</changelog>
</package>
<package pkgid="285d896ca8028cb3d50e2a71fe92fc829b084a6e3d32fd98deba62e6ea73bec2" name="libtirpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="9.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3" date="1660564800">- Rebased to libtirpc-1.3.3 (bz 2118157)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-1" date="1667476800">- bindresvport.c: fix a potential resource leakage (bz 2135405)
- clnt_raw.c: fix a possible null pointer dereference (bz 2138317)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-2" date="1684411200">- getnetconfigent: avoid potential DoS (bz 2150611)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-3" date="1704196800">- Null pointers so they are not used again (RHEL-11371)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.3-4" date="1708344000">- Add gating tests (rhel-7883)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-5" date="1709553600">- Fix rpc_gss_seccreate() usage of the passed in gss credential. (RHEL-27936)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-6" date="1709640000">- rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-7" date="1710331200">- exception build (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-8" date="1710849600">- rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-9" date="1722254400">- Support abstract addresses for rpcbind (RHEL-47027)</changelog>
</package>
<package pkgid="3d7db78ce867a68f0134f652a7000e9bc92ac69b51dd306a5458bc828b7983e1" name="libtirpc-debugsource" arch="i686">
  <version epoch="0" ver="1.3.3" rel="9.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3" date="1660564800">- Rebased to libtirpc-1.3.3 (bz 2118157)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-1" date="1667476800">- bindresvport.c: fix a potential resource leakage (bz 2135405)
- clnt_raw.c: fix a possible null pointer dereference (bz 2138317)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-2" date="1684411200">- getnetconfigent: avoid potential DoS (bz 2150611)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-3" date="1704196800">- Null pointers so they are not used again (RHEL-11371)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.3-4" date="1708344000">- Add gating tests (rhel-7883)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-5" date="1709553600">- Fix rpc_gss_seccreate() usage of the passed in gss credential. (RHEL-27936)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-6" date="1709640000">- rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-7" date="1710331200">- exception build (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-8" date="1710849600">- rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-9" date="1722254400">- Support abstract addresses for rpcbind (RHEL-47027)</changelog>
</package>
<package pkgid="f2d9b49774eebcabbfc153dcdf18c40d80e7779a9fc6705d621036050c917958" name="libtirpc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="9.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3" date="1660564800">- Rebased to libtirpc-1.3.3 (bz 2118157)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-1" date="1667476800">- bindresvport.c: fix a potential resource leakage (bz 2135405)
- clnt_raw.c: fix a possible null pointer dereference (bz 2138317)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-2" date="1684411200">- getnetconfigent: avoid potential DoS (bz 2150611)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-3" date="1704196800">- Null pointers so they are not used again (RHEL-11371)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.3-4" date="1708344000">- Add gating tests (rhel-7883)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-5" date="1709553600">- Fix rpc_gss_seccreate() usage of the passed in gss credential. (RHEL-27936)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-6" date="1709640000">- rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-7" date="1710331200">- exception build (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-8" date="1710849600">- rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-9" date="1722254400">- Support abstract addresses for rpcbind (RHEL-47027)</changelog>
</package>
<package pkgid="8f447c5bb836f1c822ea391564d76d1aa581791508ae5d0e999099d58c5bd79a" name="libtool-debugsource" arch="i686">
  <version epoch="0" ver="2.4.6" rel="46.el9"/>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.4.6-46" date="1717675200">- Harden libltdl loaders (RHEL-39991)</changelog>
</package>
<package pkgid="1227fb50884d3b30ab9e89e3c0ab4b1a78ab0ff625051d94acfac75cd820bcbd" name="libtool-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="46.el9"/>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.4.6-46" date="1717675200">- Harden libltdl loaders (RHEL-39991)</changelog>
</package>
<package pkgid="402683da2f89f150801c88e25d501c1076490b27a1c385c4168fb9f49ed46556" name="libtool-ltdl-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="46.el9"/>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.4.6-46" date="1717675200">- Harden libltdl loaders (RHEL-39991)</changelog>
</package>
<package pkgid="09c71f960da8fdca238d8bb3931672ab39f43434a67df3d621405cf3fa4dbb9a" name="libtool-ltdl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="46.el9"/>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.4.6-46" date="1717675200">- Harden libltdl loaders (RHEL-39991)</changelog>
</package>
<package pkgid="8a3b593caed6ff0e82f9d04a120fe81bf28c1bf8a98626b8cbf4614a8475cbb5" name="libtracecmd-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.2" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="86f7b22828e9599b4e0720ede88517c6859c23a4fb1b67a48dd844fe36d39a08" name="libtracecmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="8a1d057321aa3ebaf31eeea71afb833a7fe571a173458deeb45ac2b0e72b9dc1" name="libtraceevent-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.4" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-1" date="1740398400">- Rebase to 1.8.4 (RHEL-67585)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-2" date="1741003200">- Rebuild without side-tags (RHEL-67585)</changelog>
</package>
<package pkgid="31af2d0a052c2bc20537c4990dc9c937e34e1b85c5e6e63050e1a097477f950d" name="libtraceevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-1" date="1740398400">- Rebase to 1.8.4 (RHEL-67585)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-2" date="1741003200">- Rebuild without side-tags (RHEL-67585)</changelog>
</package>
<package pkgid="4043a05419be993a89c035a35b42dbb6de930cd4ad391d6cf123cc4776193576" name="libtraceevent-debugsource" arch="i686">
  <version epoch="0" ver="1.8.4" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-1" date="1740398400">- Rebase to 1.8.4 (RHEL-67585)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-2" date="1741003200">- Rebuild without side-tags (RHEL-67585)</changelog>
</package>
<package pkgid="967cefc8f170317efcc63b1966a40d1c7c5fc0c9effc5980b2ebcf63fad0556d" name="libtraceevent-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-1" date="1740398400">- Rebase to 1.8.4 (RHEL-67585)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-2" date="1741003200">- Rebuild without side-tags (RHEL-67585)</changelog>
</package>
<package pkgid="6271187f301cd7597fac2b23e1f42d82fcfc43606f50dfc4ed5075eb149ad0a8" name="libtracefs-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.6.4-1" date="1723809600">- Rebase to 1.6.4 (RHEL-36547)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-1" date="1740398400">- Rebase to 1.8.1 (Related: RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-2" date="1741003200">- Rebuild without side-tags (RHEL-81923)</changelog>
</package>
<package pkgid="e07566a35cb76ca450c85883d18f252079aa90488fd42470afa8dbe0ebecbbaf" name="libtracefs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.6.4-1" date="1723809600">- Rebase to 1.6.4 (RHEL-36547)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-1" date="1740398400">- Rebase to 1.8.1 (Related: RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-2" date="1741003200">- Rebuild without side-tags (RHEL-81923)</changelog>
</package>
<package pkgid="92ae932efb4e4a3ce5bd969cf58d74f8f34f8b9d4ce866cb4edb7ef2fe725be3" name="libtracefs-debugsource" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.6.4-1" date="1723809600">- Rebase to 1.6.4 (RHEL-36547)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-1" date="1740398400">- Rebase to 1.8.1 (Related: RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-2" date="1741003200">- Rebuild without side-tags (RHEL-81923)</changelog>
</package>
<package pkgid="691e7d81ba0fbd1beb51ed383a66e3bfc392759f2b01c1ec70e0ab8b9c8b2b6b" name="libtracefs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.6.4-1" date="1723809600">- Rebase to 1.6.4 (RHEL-36547)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-1" date="1740398400">- Rebase to 1.8.1 (Related: RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.1-2" date="1741003200">- Rebuild without side-tags (RHEL-81923)</changelog>
</package>
<package pkgid="c8428ce69be0ec888cc83bed90d359c2a78c7615efcaaa63800a1f7bd97dc5eb" name="libunistring-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.10" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.10-8" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-12" date="1623672000">- Fix memory leak in vasnprint. Resolves: rhbz#1938800
  (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-13" date="1623672001">- Related rhbz#1938800: Fix spelling in license GPLV2+ -&gt; GPLv2+</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-14" date="1624276800">- Related rhbz#1938800: Fix CI tests and convert them to tmt</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1a2fb7fa023e3f284e1bd4aff8b83bff6af8e444b7fea48740bf301cd33a5a3f" name="libunistring-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.10-8" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-12" date="1623672000">- Fix memory leak in vasnprint. Resolves: rhbz#1938800
  (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-13" date="1623672001">- Related rhbz#1938800: Fix spelling in license GPLV2+ -&gt; GPLv2+</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-14" date="1624276800">- Related rhbz#1938800: Fix CI tests and convert them to tmt</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5756bfa66fa9ce70e675259fdc2fe80745365100bda3f61d485f0202fa703cea" name="libunistring-debugsource" arch="i686">
  <version epoch="0" ver="0.9.10" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.10-8" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-12" date="1623672000">- Fix memory leak in vasnprint. Resolves: rhbz#1938800
  (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-13" date="1623672001">- Related rhbz#1938800: Fix spelling in license GPLV2+ -&gt; GPLv2+</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-14" date="1624276800">- Related rhbz#1938800: Fix CI tests and convert them to tmt</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="10bf4607214e930fc1017b71935f3592a80b2a9c55c41cbafbd0e0cf85219935" name="libunistring-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.10-8" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-12" date="1623672000">- Fix memory leak in vasnprint. Resolves: rhbz#1938800
  (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-13" date="1623672001">- Related rhbz#1938800: Fix spelling in license GPLV2+ -&gt; GPLv2+</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.10-14" date="1624276800">- Related rhbz#1938800: Fix CI tests and convert them to tmt</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.10-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="53f617b10f8a492e76d08b05ee331ac740dba1d90032a4f4a3886396dbf9baa5" name="libusbx-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.26" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.0.24-1" date="1613044800">- Update to 1.0.24</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.24-2" date="1613476800">- Pull in upstream bugfixes
  Resolves: #1929148</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-1" date="1644494400">- Update to 1.0.25
- Fix a crash after libusb_exit API has been misused
- Add patchset to fix covscan reports
  Resolves: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-2" date="1644926400">- Fix a crash if a transfer outlives closing the device
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-3" date="1646049600">- Updated and new regression fixes
  Resolves: #2058730
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.26" date="1649764800">- Pull in new upstream libusb containing important regression fixes
  Resolves: #2058730
  Resolves: #1938801</changelog>
</package>
<package pkgid="0a052dcae8c24752390d58ce058d1f85eadb856f0192625727cd09689e3c8e95" name="libusbx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.26" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.0.24-1" date="1613044800">- Update to 1.0.24</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.24-2" date="1613476800">- Pull in upstream bugfixes
  Resolves: #1929148</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-1" date="1644494400">- Update to 1.0.25
- Fix a crash after libusb_exit API has been misused
- Add patchset to fix covscan reports
  Resolves: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-2" date="1644926400">- Fix a crash if a transfer outlives closing the device
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-3" date="1646049600">- Updated and new regression fixes
  Resolves: #2058730
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.26" date="1649764800">- Pull in new upstream libusb containing important regression fixes
  Resolves: #2058730
  Resolves: #1938801</changelog>
</package>
<package pkgid="9f88d36eea45d5c2754a23586ccd1f95bbec2e89a70615d64152f81b437ea7cc" name="libusbx-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="c8f6ebe529d9f57a391ee7d1e6e3c981ea7448a6061543ae801f44a19a0ef009" name="libusbx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="f9ed0bb7ca1c117bf51561a1c7f4936477f9122e1a6b9b5f1b1cda12bd841e0e" name="libusbx-debugsource" arch="i686">
  <version epoch="0" ver="1.0.26" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.0.24-1" date="1613044800">- Update to 1.0.24</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.24-2" date="1613476800">- Pull in upstream bugfixes
  Resolves: #1929148</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-1" date="1644494400">- Update to 1.0.25
- Fix a crash after libusb_exit API has been misused
- Add patchset to fix covscan reports
  Resolves: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-2" date="1644926400">- Fix a crash if a transfer outlives closing the device
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-3" date="1646049600">- Updated and new regression fixes
  Resolves: #2058730
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.26" date="1649764800">- Pull in new upstream libusb containing important regression fixes
  Resolves: #2058730
  Resolves: #1938801</changelog>
</package>
<package pkgid="7082b23f80f68d6280969bfed44cc6de6ce64c58b8e09eecf3ee1434339dd1fb" name="libusbx-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.26" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.0.24-1" date="1613044800">- Update to 1.0.24</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.24-2" date="1613476800">- Pull in upstream bugfixes
  Resolves: #1929148</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-1" date="1644494400">- Update to 1.0.25
- Fix a crash after libusb_exit API has been misused
- Add patchset to fix covscan reports
  Resolves: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-2" date="1644926400">- Fix a crash if a transfer outlives closing the device
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-3" date="1646049600">- Updated and new regression fixes
  Resolves: #2058730
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.26" date="1649764800">- Pull in new upstream libusb containing important regression fixes
  Resolves: #2058730
  Resolves: #1938801</changelog>
</package>
<package pkgid="c09dd2a47dfc3cebadc53d6426e9fe6e0826272c43fb564d600e6019a5297f7d" name="libusbx-debugsource" arch="i686">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="5c72451c2998fa6f88d54df9027076416ccc45623ea6214c5c437e6095acc358" name="libusbx-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="c9dcd7ffee418ce6259863323a1614b24bfb12efb41a0a79658cedc4460526bd" name="libuser-debuginfo" arch="i686">
  <version epoch="0" ver="0.63" rel="17.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-13" date="1689076800">- Translation update
  Resolves: rhbz#2139662</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-14" date="1714996800">- Fix findings from static application security testing
  Resolves: RHEL-35693</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-15" date="1715083200">- Update translations
  Resolves: RHEL-12110</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-16" date="1730894400">- allow 32 char usernames (#RHEL-55983)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-17" date="1743595200">- create temporary edit files at symlink target location (RHEL-85754)</changelog>
</package>
<package pkgid="c4a4acc30287744da4603d2b345d8de61e1f872418333ee6c971a05e97fd6bf6" name="libuser-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.63" rel="17.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-13" date="1689076800">- Translation update
  Resolves: rhbz#2139662</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-14" date="1714996800">- Fix findings from static application security testing
  Resolves: RHEL-35693</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-15" date="1715083200">- Update translations
  Resolves: RHEL-12110</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-16" date="1730894400">- allow 32 char usernames (#RHEL-55983)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-17" date="1743595200">- create temporary edit files at symlink target location (RHEL-85754)</changelog>
</package>
<package pkgid="dd5b4534518fc3dfbc1ad620c10f54471cf94b8b414ec4d711f50a3f822bfea3" name="libuser-debugsource" arch="i686">
  <version epoch="0" ver="0.63" rel="17.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-13" date="1689076800">- Translation update
  Resolves: rhbz#2139662</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-14" date="1714996800">- Fix findings from static application security testing
  Resolves: RHEL-35693</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-15" date="1715083200">- Update translations
  Resolves: RHEL-12110</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-16" date="1730894400">- allow 32 char usernames (#RHEL-55983)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-17" date="1743595200">- create temporary edit files at symlink target location (RHEL-85754)</changelog>
</package>
<package pkgid="f94c31d7affff98d8afaf0dedb34e36c796c5fc9246c94edafbe213031937942" name="libuser-debugsource" arch="x86_64">
  <version epoch="0" ver="0.63" rel="17.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-13" date="1689076800">- Translation update
  Resolves: rhbz#2139662</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-14" date="1714996800">- Fix findings from static application security testing
  Resolves: RHEL-35693</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-15" date="1715083200">- Update translations
  Resolves: RHEL-12110</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-16" date="1730894400">- allow 32 char usernames (#RHEL-55983)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-17" date="1743595200">- create temporary edit files at symlink target location (RHEL-85754)</changelog>
</package>
<package pkgid="a7c68e1e31a3fe7c4327e8f39a77c90532901bf698dd4732cf4830634e43da1e" name="libutempter-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1590408000">- Update to 1.2.0 (#1831940)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-1" date="1594123200">- Update to 1.2.1 (#1854129)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-3" date="1597320000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="901ae83bbb2c9d3add745f47b6ef328e591606956d38b0ec191ea77cc0a9dd7e" name="libutempter-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1590408000">- Update to 1.2.0 (#1831940)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-1" date="1594123200">- Update to 1.2.1 (#1854129)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-3" date="1597320000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="dd437f9d70bea98856558b53dbc9ef40c51fa03fea60773de4ee2d0c1afbd701" name="libutempter-debugsource" arch="i686">
  <version epoch="0" ver="1.2.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1590408000">- Update to 1.2.0 (#1831940)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-1" date="1594123200">- Update to 1.2.1 (#1854129)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-3" date="1597320000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="10da167b50a802998c66a49be2d4a9f9fcc5d39abe705cec2df321caef95feb4" name="libutempter-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1590408000">- Update to 1.2.0 (#1831940)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-1" date="1594123200">- Update to 1.2.1 (#1854129)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-3" date="1597320000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="89800571b2190e0107fb4f78f5b1fca7f25046884bd78e91c053ed714a74a883" name="libuuid-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="7ac4dfa0392497ebcba062c698207eb96dd36df33599166c15db18fe4502bc7a" name="libuuid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="daf9dcfd351739d481923cfb2a68ac891cacd32fdad87c2cab4bda7ea1c8d14f" name="libverto-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b671af1535b0d434dce6e06eed6f0a00356dc0fad51ae35e6b97c0fbc7b1d779" name="libverto-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0b6aad53ff0e552d7f068a61c721bf5e9ecd6ed4e705355b0cc42ac842226632" name="libverto-debugsource" arch="i686">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="24e27e9933d701dabc018d165cfa88f53b194e7bbb7a37160e3569a6e4df33f9" name="libverto-debugsource" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="333001c60c547a5057bfee6f6993a609c33ad639adea3e00f11c3979b9aa7763" name="libverto-libev-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="df40d59f53026eb2e056073d161c272b3bb4c42381e82ecab5d043eff0efaf7e" name="libverto-libev-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0850682348e49181bac415bc30ccda411d4caace181470286da5fa66bc2c0cfc" name="libwbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="45daf38d8d36d2bd03e8cc28be9a14d6dc23d622e3126f64986e21b32f675731" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="d7a218ed4379b9fbc5ad68c7da9c82479e2baf67a7ae1037d2bfc9e702afac6b" name="libwbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="126d1722e36e987bf47f8e1fc9f9773c22fa234aa6b22f9f6ec4f8942202718a" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="14766e877c21ed7d08de7fb5a061f0bbae132d35a3f048d45596c0019d9c3b1a" name="libwbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="f62f26975bafcee481a5abf898d48c102265955a1763f881257a9a4850e5ab43" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="e4fcc9016c141cf4e1eb5e4044a33f6c37ce2788dca234af1addd67552d90e97" name="libxcrypt-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.18" rel="3.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-3" date="1587816000">- Explicitly force linking with '-Wl,-z,defs'</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-4" date="1592568000">- Trim %changelog starting with v4.4.0
- Remove memcheck conditional</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 4.4.16-5" date="1593518400">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-7" date="1597492800">- Add a patch to add support for LTO builds
- Enable LTO
- Add a patch to fix Wformat-overflow</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.17-1" date="1598184000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.18-1" date="1613822400">- New upstream release
- Add explicit BR: perl-core</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9e8de6cad7f5c3f08b3e4c752759db67552ac04c23ecbac680751f24a01dc691" name="libxcrypt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.18" rel="3.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-3" date="1587816000">- Explicitly force linking with '-Wl,-z,defs'</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-4" date="1592568000">- Trim %changelog starting with v4.4.0
- Remove memcheck conditional</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 4.4.16-5" date="1593518400">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-7" date="1597492800">- Add a patch to add support for LTO builds
- Enable LTO
- Add a patch to fix Wformat-overflow</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.17-1" date="1598184000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.18-1" date="1613822400">- New upstream release
- Add explicit BR: perl-core</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e85ce4dc636526a25b23af93b7b2b2fd6d1696c87a243254f8b121a39809489c" name="libxcrypt-debugsource" arch="i686">
  <version epoch="0" ver="4.4.18" rel="3.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-3" date="1587816000">- Explicitly force linking with '-Wl,-z,defs'</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-4" date="1592568000">- Trim %changelog starting with v4.4.0
- Remove memcheck conditional</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 4.4.16-5" date="1593518400">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-7" date="1597492800">- Add a patch to add support for LTO builds
- Enable LTO
- Add a patch to fix Wformat-overflow</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.17-1" date="1598184000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.18-1" date="1613822400">- New upstream release
- Add explicit BR: perl-core</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="756fc4ac87314e9a83a4f24e74f5a0b58c70f893f1e9c221903ba94a99386f4a" name="libxcrypt-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4.18" rel="3.el9"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-3" date="1587816000">- Explicitly force linking with '-Wl,-z,defs'</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-4" date="1592568000">- Trim %changelog starting with v4.4.0
- Remove memcheck conditional</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 4.4.16-5" date="1593518400">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.16-7" date="1597492800">- Add a patch to add support for LTO builds
- Enable LTO
- Add a patch to fix Wformat-overflow</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.17-1" date="1598184000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.18-1" date="1613822400">- New upstream release
- Add explicit BR: perl-core</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.4.18-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ccb2179e7976546febf3a59f0b8ddcb8d4a014328779a815ae8371d03e821053" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_7"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.9.13-6" date="1714392000">- Fix CVE-2024-25062 (RHEL-29196)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
</package>
<package pkgid="906038d9d6c9d7be111479cda2a3c4f5b97281ff9d1f7e616f474d111420c26d" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_7"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.9.13-6" date="1714392000">- Fix CVE-2024-25062 (RHEL-29196)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
</package>
<package pkgid="1f14ce92cad891a678127f5c0268b4c07641f172d243edc6552caff67a5672ea" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="70cee48854f63fb94a4cca397d7285c4d9bfe6871e080b6c2901918a67455cb0" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="b3bbfec33c63e42005cfde1f12a1b0d17f067c5cf4560ebe79309c2d2fec9e72" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="acb536337b86a87944b59372c8750b59ede65814545af118dbc575277f94cfe6" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="3e52714d5d9f1436ef97d4d448ffb6aedbf7ea8a0aa2c14f09e81d120bfa044c" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.4"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.3" date="1785153600">- Fix CVE-2026-6653 (RHEL-215619)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.4" date="1785153601">- Fix CVE-2026-11979 (RHEL-215568)</changelog>
</package>
<package pkgid="8ac7d22dd18250303dadc34c0f0d7f4fb39519d2cb05fa028d51e78bd8ff175e" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.4"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.3" date="1785153600">- Fix CVE-2026-6653 (RHEL-215619)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.4" date="1785153601">- Fix CVE-2026-11979 (RHEL-215568)</changelog>
</package>
<package pkgid="4e3f4b49fcca2fb719494a87dcb6ea23bbec339bb53a78f5fcc039eae668bbd7" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_7"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.9.13-6" date="1714392000">- Fix CVE-2024-25062 (RHEL-29196)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
</package>
<package pkgid="7338ea196aab21a9347086fbd24885bac0904944cbf2ad4c9c0a052523f3cca4" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_7"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.9.13-6" date="1714392000">- Fix CVE-2024-25062 (RHEL-29196)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
</package>
<package pkgid="ef3575a16b2a07f5e4855ce6375dba760a7020e1895e7bb55536b9ab1c7f7d71" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="4631fa8ae4b7262b349cf5080ade73d34d6f76f7a2c28dd38b560c83ea33df51" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="34a83b98021d19b89652f6bedbaea9e94c5118b4657b0e8eec375ac2b8a2b7f8" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="deeb409d6fa6cb12915a6df1a034862b7b15adc6286503266f85ba4fb2d102d0" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="f8a473e60e981599079fd47680cd77b8e160141a1c366a19c827a6b78adde9a8" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.4"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.3" date="1785153600">- Fix CVE-2026-6653 (RHEL-215619)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.4" date="1785153601">- Fix CVE-2026-11979 (RHEL-215568)</changelog>
</package>
<package pkgid="333149e9f89bb27171c264e108d848ac888526e2b765baff61cc45a82db534a0" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.4"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.3" date="1785153600">- Fix CVE-2026-6653 (RHEL-215619)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.4" date="1785153601">- Fix CVE-2026-11979 (RHEL-215568)</changelog>
</package>
<package pkgid="f49ae89c94c463a53d749545da9684d9ed5a56bfe440e6d45fbcd6ae27ce3e11" name="libxmlb-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.24" rel="1.el9"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 0.3.24-1" date="1758888000">- Rebase to 0.3.24
- Add missing libzstd-devel BuildRequires
- Add missing files to the %files tests section
- Resolves: RHEL-116442</changelog>
</package>
<package pkgid="50a8e79ecbec8546404f8a2552245a0ea17bbae33c0c60a9badddf7e4ab38799" name="libxmlb-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="1.el9"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 0.3.24-1" date="1758888000">- Rebase to 0.3.24
- Add missing libzstd-devel BuildRequires
- Add missing files to the %files tests section
- Resolves: RHEL-116442</changelog>
</package>
<package pkgid="7410de62fe841dc3feb6927399e5784dcf0ff70b0e8331d5e7a5a9c826b31326" name="libxmlb-debugsource" arch="i686">
  <version epoch="0" ver="0.3.24" rel="1.el9"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 0.3.24-1" date="1758888000">- Rebase to 0.3.24
- Add missing libzstd-devel BuildRequires
- Add missing files to the %files tests section
- Resolves: RHEL-116442</changelog>
</package>
<package pkgid="507e9995a65017eaa558a10a856a898e2bc58a163864d2d7520221dd1886dc01" name="libxmlb-debugsource" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="1.el9"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 0.3.24-1" date="1758888000">- Rebase to 0.3.24
- Add missing libzstd-devel BuildRequires
- Add missing files to the %files tests section
- Resolves: RHEL-116442</changelog>
</package>
<package pkgid="808c3135b2308b9a9d62b35da0793aad25d872650522fd8e983a51e163cc4492" name="libyaml-debuginfo" arch="i686">
  <version epoch="0" ver="0.2.5" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.3-1" date="1586779200">- New upstream release (rhbz#1823108)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.4-1" date="1587297600">- New upstream release (rhbz#1825622)
- Fixes document end before directive (rhbz#1824226)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.5-1" date="1591099200">- New upstream release (rhbz#1842769)</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.2.5-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 0.2.5-4" date="1606824000">- Add BuildRequires for make
  (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fbbc283b453e75b6c5df219c589080992cd2976263a592c9144610605061b312" name="libyaml-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.3-1" date="1586779200">- New upstream release (rhbz#1823108)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.4-1" date="1587297600">- New upstream release (rhbz#1825622)
- Fixes document end before directive (rhbz#1824226)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.5-1" date="1591099200">- New upstream release (rhbz#1842769)</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.2.5-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 0.2.5-4" date="1606824000">- Add BuildRequires for make
  (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="767006ea231a7217df0ef86e27d6755694bce10f143b46a5e185713f63a03e9d" name="libyaml-debugsource" arch="i686">
  <version epoch="0" ver="0.2.5" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.3-1" date="1586779200">- New upstream release (rhbz#1823108)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.4-1" date="1587297600">- New upstream release (rhbz#1825622)
- Fixes document end before directive (rhbz#1824226)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.5-1" date="1591099200">- New upstream release (rhbz#1842769)</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.2.5-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 0.2.5-4" date="1606824000">- Add BuildRequires for make
  (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="db81d05066bcd1db2a92810599c0a69151583ad4842d779e7a5372d280e5be52" name="libyaml-debugsource" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.3-1" date="1586779200">- New upstream release (rhbz#1823108)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.4-1" date="1587297600">- New upstream release (rhbz#1825622)
- Fixes document end before directive (rhbz#1824226)</changelog>
  <changelog author="John Eckersberg &lt;eck@redhat.com&gt; - 0.2.5-1" date="1591099200">- New upstream release (rhbz#1842769)</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.2.5-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 0.2.5-4" date="1606824000">- Add BuildRequires for make
  (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.5-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="779ffc3d6147c437e88f60030c7d80ec46d4ad1f2f95bac9811e85881540d12a" name="libzstd-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
<package pkgid="777188b23f2d0670d240968601007dc43714cf7e1314815d583ae561300b40b4" name="libzstd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
<package pkgid="96662a71a0a153697a591d6eb533af96abaa343e47274d43ed3932808ad63fc0" name="lksctp-tools-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.19" rel="3.el9_4"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-2" date="1649764800">- Bring back one RHEL specific patch to fix the installation issue.
  Related: rhbz#2031786</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-3" date="1707739200">- man doc update and one fix for lib and another for sctp_test.
  Related: RHEL-25098</changelog>
</package>
<package pkgid="25af54607e66035287d2b12fc6cf9d3225f4fcf4175093d794457cf4a6667e44" name="lksctp-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.19" rel="3.el9_4"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-2" date="1649764800">- Bring back one RHEL specific patch to fix the installation issue.
  Related: rhbz#2031786</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-3" date="1707739200">- man doc update and one fix for lib and another for sctp_test.
  Related: RHEL-25098</changelog>
</package>
<package pkgid="23c79ef4bd3d6686e6121117601d2ef08d4b8ca82636ed0cbee3d1ee49ad815c" name="lksctp-tools-debugsource" arch="i686">
  <version epoch="0" ver="1.0.19" rel="3.el9_4"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-2" date="1649764800">- Bring back one RHEL specific patch to fix the installation issue.
  Related: rhbz#2031786</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-3" date="1707739200">- man doc update and one fix for lib and another for sctp_test.
  Related: RHEL-25098</changelog>
</package>
<package pkgid="419eb0e3b4a592558ee044d001630f5de3af0006fb2526015147432358bdc374" name="lksctp-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.19" rel="3.el9_4"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-2" date="1649764800">- Bring back one RHEL specific patch to fix the installation issue.
  Related: rhbz#2031786</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.0.19-3" date="1707739200">- man doc update and one fix for lib and another for sctp_test.
  Related: RHEL-25098</changelog>
</package>
<package pkgid="360637b886ba2e38ca061c780d9c897219ee702f29f6ecce3158f814a502b16e" name="lldpad-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.1" rel="4.gitf1dd9eb.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.0-5.git85e5583" date="1700049600">- Convert the license tag to SPDX format (RHELMISC-1358)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-1.gitf1dd9eb" date="1725451200">- Rebase to 1.1.1
- Fix program segfaults after entering the quit command (RHEL-5814)
- Fix setting interface status not survive reboot (RHEL-5824)
- Fix some other bugs</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-2.gitf1dd9eb" date="1725451201">- Update gating test</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-3.gitf1dd9eb" date="1725883200">- Rebase to latest upstream code
- Remove interface configure if the interface deleted (RHEL-13242)
- Fix strdup is not freed (RHEL-37524)
- Fix using uninitialized value (RHEL-37548)
- Fix copy past error (RHEL-37679)
- Fix resource leak (RHEL-37685)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-4.gitf1dd9eb" date="1737374400">- do not remove config when stopping lldpad (RHEL-61874)</changelog>
</package>
<package pkgid="79132ec910079e1b753a54bfa361797b2d670226e0b4db34da6f52bfc5adba36" name="lldpad-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="4.gitf1dd9eb.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.0-5.git85e5583" date="1700049600">- Convert the license tag to SPDX format (RHELMISC-1358)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-1.gitf1dd9eb" date="1725451200">- Rebase to 1.1.1
- Fix program segfaults after entering the quit command (RHEL-5814)
- Fix setting interface status not survive reboot (RHEL-5824)
- Fix some other bugs</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-2.gitf1dd9eb" date="1725451201">- Update gating test</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-3.gitf1dd9eb" date="1725883200">- Rebase to latest upstream code
- Remove interface configure if the interface deleted (RHEL-13242)
- Fix strdup is not freed (RHEL-37524)
- Fix using uninitialized value (RHEL-37548)
- Fix copy past error (RHEL-37679)
- Fix resource leak (RHEL-37685)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-4.gitf1dd9eb" date="1737374400">- do not remove config when stopping lldpad (RHEL-61874)</changelog>
</package>
<package pkgid="a3e8c73eafb7df058e307958c9d14210ee0ad991b343eb4b5098376e0784956f" name="lldpad-debugsource" arch="i686">
  <version epoch="0" ver="1.1.1" rel="4.gitf1dd9eb.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.0-5.git85e5583" date="1700049600">- Convert the license tag to SPDX format (RHELMISC-1358)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-1.gitf1dd9eb" date="1725451200">- Rebase to 1.1.1
- Fix program segfaults after entering the quit command (RHEL-5814)
- Fix setting interface status not survive reboot (RHEL-5824)
- Fix some other bugs</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-2.gitf1dd9eb" date="1725451201">- Update gating test</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-3.gitf1dd9eb" date="1725883200">- Rebase to latest upstream code
- Remove interface configure if the interface deleted (RHEL-13242)
- Fix strdup is not freed (RHEL-37524)
- Fix using uninitialized value (RHEL-37548)
- Fix copy past error (RHEL-37679)
- Fix resource leak (RHEL-37685)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-4.gitf1dd9eb" date="1737374400">- do not remove config when stopping lldpad (RHEL-61874)</changelog>
</package>
<package pkgid="1a5bb9e4675b3f4550bfaa3b02d71ff9d3d79e19291ab6af98951a1f6e35152c" name="lldpad-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="4.gitf1dd9eb.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.0-5.git85e5583" date="1700049600">- Convert the license tag to SPDX format (RHELMISC-1358)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-1.gitf1dd9eb" date="1725451200">- Rebase to 1.1.1
- Fix program segfaults after entering the quit command (RHEL-5814)
- Fix setting interface status not survive reboot (RHEL-5824)
- Fix some other bugs</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-2.gitf1dd9eb" date="1725451201">- Update gating test</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-3.gitf1dd9eb" date="1725883200">- Rebase to latest upstream code
- Remove interface configure if the interface deleted (RHEL-13242)
- Fix strdup is not freed (RHEL-37524)
- Fix using uninitialized value (RHEL-37548)
- Fix copy past error (RHEL-37679)
- Fix resource leak (RHEL-37685)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-4.gitf1dd9eb" date="1737374400">- do not remove config when stopping lldpad (RHEL-61874)</changelog>
</package>
<package pkgid="be2cb2edb8ce84cc4b5d946d2fc53deda2839ebef78fcba3b37f2b031194acb8" name="lmdb-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8b762fd922df4068a2db7713290c5365e428c79546ee14847194466be5552a93" name="lmdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f4b40415c578951982c61de72c4b2b5607a578404a96e207ad82a39ee6ec5108" name="lmdb-debugsource" arch="i686">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b973ab74b67f7633d071a954612aa39d8fe3fdc60e7dbbe2046a26e87e3409d5" name="lmdb-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="10e45b878c1568b36ea7e49c6075ecd1b7fe7052357678b9fbfc47577e610b34" name="lmdb-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="398ddc8745b2bc2b029ba14c73f2ec434fb8710ff80bb82360e177a44f7cd18b" name="lmdb-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="640b0c3c5ba4486bbdd42ab16124e611574f83d5187a47dedb3c72f64a025d5d" name="lockdev-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.4" rel="0.38.20111007git.el9_6"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1.0.4-0.38.20111007git" date="1740139200">- Fix memory leaks found by static analysis
- Resolves: RHEL-80167</changelog>
</package>
<package pkgid="8170b59bd99612029e1dd245f6fe6c59432e4f576bb35be838cdd4dca70ea5f0" name="lockdev-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="0.38.20111007git.el9_6"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1.0.4-0.38.20111007git" date="1740139200">- Fix memory leaks found by static analysis
- Resolves: RHEL-80167</changelog>
</package>
<package pkgid="f589eab9f765148aa7768ec7029d18ab903b7e6a08e022bf425c7039c6a39c52" name="lockdev-debugsource" arch="i686">
  <version epoch="0" ver="1.0.4" rel="0.38.20111007git.el9_6"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1.0.4-0.38.20111007git" date="1740139200">- Fix memory leaks found by static analysis
- Resolves: RHEL-80167</changelog>
</package>
<package pkgid="369696b4a0981a624668dd2a3e138700c64eaa841a0d381d2bbb451c2f934ee9" name="lockdev-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="0.38.20111007git.el9_6"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1.0.4-0.38.20111007git" date="1740139200">- Fix memory leaks found by static analysis
- Resolves: RHEL-80167</changelog>
</package>
<package pkgid="66dc8cc09bba417c1289a597cc646ac5347517fbc0f1c7e35091be6d9e78be68" name="logrotate-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="12.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-9" date="1735819200">- config: introduce `ignoreduplicates` configuration directive (#RHEL-5711)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-10" date="1748606400">- allow to disable state management (RHEL-69959)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-11" date="1749211200">- fix memory corruption issues in config file parsing (RHEL-91449)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-12" date="1749643200">- allow to disable state management (RHEL-69959)</changelog>
</package>
<package pkgid="6e9f86119c1fc09c0d77c1dea8f7d069b312fe06358670e691f05c0eefa83f9c" name="logrotate-debugsource" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="12.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-9" date="1735819200">- config: introduce `ignoreduplicates` configuration directive (#RHEL-5711)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-10" date="1748606400">- allow to disable state management (RHEL-69959)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-11" date="1749211200">- fix memory corruption issues in config file parsing (RHEL-91449)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3.18.0-12" date="1749643200">- allow to disable state management (RHEL-69959)</changelog>
</package>
<package pkgid="4ed059f16277996c47e56bbeb8a7221f46c235aa4149a82ed0ebd3f89e1e5e66" name="lrzsz-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.20" rel="55.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-49" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-50" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-51" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.12.20-52" date="1597665600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-53" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.20-54" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.20-55" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d3d3a0c4c4f9692224b0ac7ebfea3f246835b309c081981faf928221490f1448" name="lrzsz-debugsource" arch="x86_64">
  <version epoch="0" ver="0.12.20" rel="55.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-49" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-50" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-51" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.12.20-52" date="1597665600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.20-53" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.20-54" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.20-55" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="408a09fb0e7f1c9c6e4d3cec32a926bf6ece83b0f4279ba3e5b1799d7d91c7e4" name="lshw-debuginfo" arch="x86_64">
  <version epoch="0" ver="B.02.20" rel="4.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-1" date="1730894400">- Release B.02.20-1 update to upstream latest(9372b680418)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-2" date="1746446400">- Release B.02.20-2 update to upstream latest(98b74f64e76)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-3" date="1761134400">- Release B.02.20-3 update to upstream latest(af7c69e1b6e)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-4" date="1763985600">- Release B.02.20-4 update to upstream latest(209f8306e95)</changelog>
</package>
<package pkgid="3bb2e604d2402ca122cb6efb3416df06d78208435c75fb01a3c0811f14d042d5" name="lshw-debugsource" arch="x86_64">
  <version epoch="0" ver="B.02.20" rel="4.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-1" date="1730894400">- Release B.02.20-1 update to upstream latest(9372b680418)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-2" date="1746446400">- Release B.02.20-2 update to upstream latest(98b74f64e76)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-3" date="1761134400">- Release B.02.20-3 update to upstream latest(af7c69e1b6e)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-4" date="1763985600">- Release B.02.20-4 update to upstream latest(209f8306e95)</changelog>
</package>
<package pkgid="95b06f69134c65a3f76edd143e10fdb70f50f4ef0755aff158d125fed9a0433f" name="lsof-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.94.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.93.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.93.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.93.2-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.94.0-1" date="1611835200">- Rebase to 4.94.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.94.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.94.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c45a251f79d90c65fc9d77d937ab4dc2cf1574fcca2f084a5fa2cd50eec57734" name="lsof-debugsource" arch="x86_64">
  <version epoch="0" ver="4.94.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.93.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.93.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.93.2-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.94.0-1" date="1611835200">- Rebase to 4.94.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.94.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.94.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8d8f249494b0ff4a81077de915e447bf204e75007b2d619c950ddfd74d49f4d5" name="lsscsi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.32" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 0.31-1" date="1582286400">- update to 0.31 (#1758436)</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.31-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.31-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 0.32-1" date="1605182400">- Update to 0.32 upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.32-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.32-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.32-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 0.32-5" date="1629115200">- Rebase to proper upstream 0.32 release (r167)
- Fix WWN ID truncation (#1981038)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 0.32-6" date="1629201600">- Fix the gating tests</changelog>
</package>
<package pkgid="9a561337c46f0f5c0d6ce60f016ef886fa1c290aca7098ac0b887ce113aacd9c" name="lsscsi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.32" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 0.31-1" date="1582286400">- update to 0.31 (#1758436)</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.31-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.31-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 0.32-1" date="1605182400">- Update to 0.32 upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.32-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.32-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.32-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 0.32-5" date="1629115200">- Rebase to proper upstream 0.32 release (r167)
- Fix WWN ID truncation (#1981038)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 0.32-6" date="1629201600">- Fix the gating tests</changelog>
</package>
<package pkgid="00a322bcba711e86085dcbef61aad9569357aff052d1812e7450b6bd1691c8f5" name="lua-debuginfo" arch="i686">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="a271f6da62e10726f12417d11e0a456a401c2ad91cfb9c3de57632b6126e054b" name="lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="5b5878159da3747b1cebc0fa0cc4c0d489075eab512b0ed9b24560f6ae5675f8" name="lua-debugsource" arch="i686">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="ce00e8dd6db14bdd0851905d89f8426ba9a9785be91bcb275769504c74ee6a9d" name="lua-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="654feda036f8c61e9bd484166a5d4c328e08cfd8d06ed6bf00e3dac3dfa1536e" name="lua-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="b2a39fe6c91230652031772b76d589abfbe6c59bcf2007bf132cba1538950489" name="lua-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="f7794da5d91dbd117560d838148c3bbd71fa04e49133326de1b769dee74248f7" name="lvm2-debuginfo" arch="i686">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="266757d31909d3f56f4490c308803516e5f96a4d80839c4cdf1e6394fdb7743c" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="2de219be68502862fc0ea03e8174baa47155d9d46c681f9c39d730c6a89b6061" name="lvm2-debugsource" arch="i686">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="10d4c5f44def85b584c606e1d703a9c2058a89297a09035c137c4a39a2b654f5" name="lvm2-debugsource" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="ef8f77e9f6bb129646971d40ed6f68908f7a97b0b5295f85fb602098d59ba08a" name="lvm2-libs-debuginfo" arch="i686">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="224b948747a3279af3cf95d62023a152322611d8dd41b993a7cce5218dc92fc8" name="lvm2-libs-debuginfo" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="e7bbcbba12c4465149115f7767bfe4ec4b0aadbb32ec999e91ca1f8ea80e01d8" name="lz4-debuginfo" arch="i686">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b450434171cd39d4609509916c4ce1b754e5162d57dbc0c0462c4e326646e4fb" name="lz4-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="eb72c79062bbfc3f8fd76a17a725d0b42375a0da62e661ea4f24688ef2b1bf96" name="lz4-debugsource" arch="i686">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="59e16c8d027af6f09275c6322760fb737f701b8ab4c42f8c0855a7cdabbfb53a" name="lz4-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a73c6e395852b3b8d9ba010b6b669134f9e841bf75a5706629aeccf938c2616b" name="lz4-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="856c54fb042f7dcdb9baca6361a258177e3cae9bb0f22d4dd20c3772e361c4f9" name="lz4-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="527a3057c8cc262daa6389f0f4aa566fe7796d956cf0c045e7c1696a50bd3318" name="lzo-debuginfo" arch="i686">
  <version epoch="0" ver="2.10" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.08-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 2.10-1" date="1581249600">- Update to 2.10</changelog>
  <changelog author="Michael Cronenworth &lt;mike@cchtml.com&gt; - 2.10-2" date="1583150400">- Disable -fno-strict-aliasing (RHBZ#1807737)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10-6" date="1622030400">- Release bump to drop unused patches from the dist-git
  Resolves: rhbz#1956457</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d44336577de1af1cafaee7c9ba5b61821c4550d6d891eda56b8e5fe609548131" name="lzo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.10" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.08-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 2.10-1" date="1581249600">- Update to 2.10</changelog>
  <changelog author="Michael Cronenworth &lt;mike@cchtml.com&gt; - 2.10-2" date="1583150400">- Disable -fno-strict-aliasing (RHBZ#1807737)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10-6" date="1622030400">- Release bump to drop unused patches from the dist-git
  Resolves: rhbz#1956457</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8a55f5088fe394d6f44704b7c5f34d2dfa32cc27adbfd997d13739a0e9ffda7f" name="lzo-debugsource" arch="i686">
  <version epoch="0" ver="2.10" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.08-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 2.10-1" date="1581249600">- Update to 2.10</changelog>
  <changelog author="Michael Cronenworth &lt;mike@cchtml.com&gt; - 2.10-2" date="1583150400">- Disable -fno-strict-aliasing (RHBZ#1807737)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10-6" date="1622030400">- Release bump to drop unused patches from the dist-git
  Resolves: rhbz#1956457</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="669ce00e09df5aaeaeafd6182e10d400f272069488c40c90926a589c7c05fd75" name="lzo-debugsource" arch="x86_64">
  <version epoch="0" ver="2.10" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.08-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 2.10-1" date="1581249600">- Update to 2.10</changelog>
  <changelog author="Michael Cronenworth &lt;mike@cchtml.com&gt; - 2.10-2" date="1583150400">- Disable -fno-strict-aliasing (RHBZ#1807737)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10-6" date="1622030400">- Release bump to drop unused patches from the dist-git
  Resolves: rhbz#1956457</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.10-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="049ff1f9e9bcfa3910648cdfbacb33e4f6e93700508a73d8b3b62adee2e3d1f6" name="lzop-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.04" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.04-4" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.04-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.04-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fb66f316e65493c729fd3f27c43153be4258150e04722256a63bee9da744d716" name="lzop-debugsource" arch="x86_64">
  <version epoch="0" ver="1.04" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.04-4" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.04-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.04-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3c42a0aea3ebc98cd8553a2b8291dd71d37228bebe37a4be95fd53fdac515e5e" name="make-debuginfo" arch="x86_64">
  <version epoch="1" ver="4.3" rel="8.el9"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.3-8" date="1706702400">- Don't try to execute directories (RHEL-22829)</changelog>
</package>
<package pkgid="4edc4308d0b365d8f881c0d420de7eeb710b1f255b0ff56dabded272064432da" name="make-debugsource" arch="x86_64">
  <version epoch="1" ver="4.3" rel="8.el9"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.3-8" date="1706702400">- Don't try to execute directories (RHEL-22829)</changelog>
</package>
<package pkgid="4cabf87b3fe80e15054542358824704e70b15e807601e9648d1ee300239e2f57" name="man-db-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="9.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.9.3-8" date="1748347200">- Increase MAX_NAME to 16384
- Resolves: RHEL-93724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.9.3-9" date="1749556800">- Fix patch to increase MAX_NAME to 16384
- Resolves: RHEL-93724</changelog>
</package>
<package pkgid="8a5151af1ce38a02880548480783cfb1884fe3c441feb928e201f61ed20b2fcd" name="man-db-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="9.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.9.3-8" date="1748347200">- Increase MAX_NAME to 16384
- Resolves: RHEL-93724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.9.3-9" date="1749556800">- Fix patch to increase MAX_NAME to 16384
- Resolves: RHEL-93724</changelog>
</package>
<package pkgid="55c8b15297cf499b98468221da7c6daa0576d855e553cf579e236b0b33d52ef8" name="mcelog-debuginfo" arch="x86_64">
  <version epoch="3" ver="201" rel="1.el9"/>
  <changelog author="Prarit Bhargava &lt;prarit@redhat.com&gt; - 3:194-0" date="1685966400">- Add support for EMR and SPR</changelog>
  <changelog author="Prarit Bhargava &lt;prarit@redhat.com&gt; - 3:195.0" date="1697457600">- Update to v195</changelog>
  <changelog author="Prarit Bhargava &lt;prarit@redhat.com&gt; - 3:198.0" date="1712232000">- Update to v198
- cleanup changelog</changelog>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 3:201-1" date="1733313600">- Update to v201
- Resolves: RHEL-47462</changelog>
</package>
<package pkgid="bc8568abfe8c6d089eba7df97141a5f73538f08efb512aac112773684fedd2ed" name="mcelog-debugsource" arch="x86_64">
  <version epoch="3" ver="201" rel="1.el9"/>
  <changelog author="Prarit Bhargava &lt;prarit@redhat.com&gt; - 3:194-0" date="1685966400">- Add support for EMR and SPR</changelog>
  <changelog author="Prarit Bhargava &lt;prarit@redhat.com&gt; - 3:195.0" date="1697457600">- Update to v195</changelog>
  <changelog author="Prarit Bhargava &lt;prarit@redhat.com&gt; - 3:198.0" date="1712232000">- Update to v198
- cleanup changelog</changelog>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 3:201-1" date="1733313600">- Update to v201
- Resolves: RHEL-47462</changelog>
</package>
<package pkgid="69f9f9ae9661eb6984f15ea5fd2a1da788f48fe6281dc83dbdfad067ebd419a7" name="mcstrans-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="1.el9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 3.4-1" date="1653048000">- SELinux userspace 3.4 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc1.1" date="1672660800">- SELinux userspace 3.5-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc2.1" date="1673956800">- SELinux userspace 3.5-rc2 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676462400">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702555200">- SELinux userspace 3.6 release</changelog>
</package>
<package pkgid="95750126c66380f5621aa75f4096106492dd83b12399e7d479adb30e16699085" name="mcstrans-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="1.el9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 3.4-1" date="1653048000">- SELinux userspace 3.4 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc1.1" date="1672660800">- SELinux userspace 3.5-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc2.1" date="1673956800">- SELinux userspace 3.5-rc2 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676462400">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702555200">- SELinux userspace 3.6 release</changelog>
</package>
<package pkgid="18a91e693bd2354f4c792718abd6436c557c0013ef04017d7e73fd1ff82ec833" name="mdadm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="4.el9_7"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.2-11" date="1710504000">- revert "mdadm: remove container_enough logic"
- Resolves RHEL-26272</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.2-12" date="1710936000">- To fix errata/osci problems
- Resolves RHEL-26272</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-1" date="1711713600">- Update to 4.3 and to latest upstream
- Resolves RHEL-30529</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-2" date="1715860800">- Update to latest upstream
- Resolves RHEL-36424</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-3" date="1723377600">- /dev/md symlink not created for second RAID container
- Resolves RHEL-50456</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-4" date="1729339200">- Update to latest upstream
- Resolves RHEL-52059 RHEL-40729 RHEL-31448</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4" date="1746014400">- Update to mdadm 4.4
- Resolves RHEL-87288 RHEL-72801 RHEL-88792 RHEL-88790 RHEL-63402 RHEL-72756</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-2" date="1747656000">- mdadm grow command can't work
- Resolves RHEL-92270</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-3" date="1764158400">- udev change and don't stop array during assemble
- Resolves RHEL-130808 RHEL-106747</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-4" date="1770724800">- enable sync del mode and some booting fixes
- Resolves RHEL-106747 RHEL-130808</changelog>
</package>
<package pkgid="f8bab01bc2c599450436093f363d9af6d546296bdfea43c9a4c42dfe0bf37fd6" name="mdadm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="4.el9_8.1"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-3" date="1723377600">- /dev/md symlink not created for second RAID container
- Resolves RHEL-50456</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-4" date="1729339200">- Update to latest upstream
- Resolves RHEL-52059 RHEL-40729 RHEL-31448</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4" date="1746014400">- Update to mdadm 4.4
- Resolves RHEL-87288 RHEL-72801 RHEL-88792 RHEL-88790 RHEL-63402 RHEL-72756</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-2" date="1747656000">- mdadm grow command can't work
- Resolves RHEL-92270</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-3" date="1761652800">- Update to latest upstream
- Resolves RHEL-100087, RHEL-107083</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; 4.4-3.el9_8.1" date="1783080000">- Fix UEFI backward compatibility for IMSM RAID10.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; 4.4-4.el9_8.1" date="1784030400">- Version adjustment.</changelog>
</package>
<package pkgid="f8e678c2f5fabdf4d5611f969115ace129e7459a4c936a3207104e96ac4bf2cd" name="mdadm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4" rel="4.el9_7"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.2-11" date="1710504000">- revert "mdadm: remove container_enough logic"
- Resolves RHEL-26272</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.2-12" date="1710936000">- To fix errata/osci problems
- Resolves RHEL-26272</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-1" date="1711713600">- Update to 4.3 and to latest upstream
- Resolves RHEL-30529</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-2" date="1715860800">- Update to latest upstream
- Resolves RHEL-36424</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-3" date="1723377600">- /dev/md symlink not created for second RAID container
- Resolves RHEL-50456</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-4" date="1729339200">- Update to latest upstream
- Resolves RHEL-52059 RHEL-40729 RHEL-31448</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4" date="1746014400">- Update to mdadm 4.4
- Resolves RHEL-87288 RHEL-72801 RHEL-88792 RHEL-88790 RHEL-63402 RHEL-72756</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-2" date="1747656000">- mdadm grow command can't work
- Resolves RHEL-92270</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-3" date="1764158400">- udev change and don't stop array during assemble
- Resolves RHEL-130808 RHEL-106747</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-4" date="1770724800">- enable sync del mode and some booting fixes
- Resolves RHEL-106747 RHEL-130808</changelog>
</package>
<package pkgid="f99d72fb952cae449ddb2bc2a8fb63cfeebc06ff716bd3308a6c2a20b01db181" name="mdadm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4" rel="4.el9_8.1"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-3" date="1723377600">- /dev/md symlink not created for second RAID container
- Resolves RHEL-50456</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.3-4" date="1729339200">- Update to latest upstream
- Resolves RHEL-52059 RHEL-40729 RHEL-31448</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4" date="1746014400">- Update to mdadm 4.4
- Resolves RHEL-87288 RHEL-72801 RHEL-88792 RHEL-88790 RHEL-63402 RHEL-72756</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-2" date="1747656000">- mdadm grow command can't work
- Resolves RHEL-92270</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; 4.4-3" date="1761652800">- Update to latest upstream
- Resolves RHEL-100087, RHEL-107083</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; 4.4-3.el9_8.1" date="1783080000">- Fix UEFI backward compatibility for IMSM RAID10.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; 4.4-4.el9_8.1" date="1784030400">- Version adjustment.</changelog>
</package>
<package pkgid="d00314a8b8cba9366e659a65927c2c2dc0875d1198169dd35c1346517d251bdd" name="microdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.6.0-1" date="1611835200">- Update to 3.6.0
- spec: Sync summary and description from openSUSE
- Add support for setting a platform module ID
- Add dependency for DNF configurations skeleton
- Add support for setting allow_vendor_change</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.7.1-1" date="1614600000">- Update to 3.7.1
- [download] fix: unwanted dependency on newer glib 
- [download] Support for "--resolve" and "--alldeps" arguments 
- [download] New get_packages_query function
- Support "--setopt=keepcache=0/1"
- [download] Support "--archlist=" argument
- [download] Move package download code to "download_packages" function
- [download] several optimizations
- Don't set default value of "assumeyes" to TRUE 
- Support for user confirmation and assumeyes, assumeno, defaultyes
- Extend "--setopt" to support repository options 
- Added alias "update" to "upgrade" command
- Command "update" renamed to "upgrade"
- Add support for command aliases
- dnf-data requirement only for Fedora and future RHEL
- Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
- Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 3.8.0-1" date="1622635200">- Update to 3.8.0
- distrosync: Fix style issues and plugin build with Meson 
- Add distro-sync subcommand
- Add "makecache" command</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.8.0-2" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.8.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 3.9.1-1" date="1663848000">- Update to 3.9.1
- leaves: Treat recommends as dependencies when install_weak_deps=True
- Add leaves command
- Remove non-breaking space from "Size" column (RhBug:2010676)</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.9.1-2" date="1667217600">- Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
- Revert: Add leaves command</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.9.1-3" date="1673006400">- Bump release (needed to rebuild)</changelog>
</package>
<package pkgid="f2b60b664c39b303e2a07d79890b8af427e6ad6218988017593e85727966d7c5" name="microdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.6.0-1" date="1611835200">- Update to 3.6.0
- spec: Sync summary and description from openSUSE
- Add support for setting a platform module ID
- Add dependency for DNF configurations skeleton
- Add support for setting allow_vendor_change</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.7.1-1" date="1614600000">- Update to 3.7.1
- [download] fix: unwanted dependency on newer glib 
- [download] Support for "--resolve" and "--alldeps" arguments 
- [download] New get_packages_query function
- Support "--setopt=keepcache=0/1"
- [download] Support "--archlist=" argument
- [download] Move package download code to "download_packages" function
- [download] several optimizations
- Don't set default value of "assumeyes" to TRUE 
- Support for user confirmation and assumeyes, assumeno, defaultyes
- Extend "--setopt" to support repository options 
- Added alias "update" to "upgrade" command
- Command "update" renamed to "upgrade"
- Add support for command aliases
- dnf-data requirement only for Fedora and future RHEL
- Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
- Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 3.8.0-1" date="1622635200">- Update to 3.8.0
- distrosync: Fix style issues and plugin build with Meson 
- Add distro-sync subcommand
- Add "makecache" command</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.8.0-2" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.8.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 3.9.1-1" date="1663848000">- Update to 3.9.1
- leaves: Treat recommends as dependencies when install_weak_deps=True
- Add leaves command
- Remove non-breaking space from "Size" column (RhBug:2010676)</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.9.1-2" date="1667217600">- Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
- Revert: Add leaves command</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 3.9.1-3" date="1673006400">- Bump release (needed to rebuild)</changelog>
</package>
<package pkgid="b8fe0c388586a42b46affe1606658f533b0083343bf371cd9c486db8c62e0cf5" name="minicom-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.1-12" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-13" date="1581336000">- Fix build with gcc 10
- Resolves: rhbz#1799652</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.1-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.1-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.7.1-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.7.1-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fa7820fa800dc5f8fe4b2b7f9e0f0d3624d0ff45e01bae87f27e20a2554d8fdd" name="minicom-debugsource" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.1-12" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-13" date="1581336000">- Fix build with gcc 10
- Resolves: rhbz#1799652</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.1-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.1-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.7.1-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.7.1-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d553e9b85bb65c3a8b37565027ebdcda6c9f86fbe1692ec236c588362f4fa3a4" name="mksh-debuginfo" arch="x86_64">
  <version epoch="0" ver="59c" rel="6.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 59c-6" date="1770811200">- fix postun scriptlet (RHEL-129957)</changelog>
</package>
<package pkgid="a6fe82cfe1e4aa30a166cbf667f0ff0c1bceecdc953e90330343547e5380243c" name="mksh-debugsource" arch="x86_64">
  <version epoch="0" ver="59c" rel="6.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 59c-6" date="1770811200">- fix postun scriptlet (RHEL-129957)</changelog>
</package>
<package pkgid="0e0602bdbfe1b0c9d8a952a5b0dd1fd0951afb4e68db80201609db8037dda475" name="mlocate-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-25" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.26-27" date="1603368000">- Don't prune bind mounts on ostree based systems, prune the deployments folder
  there to avoid duplications.
- Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.26-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.26-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="98d28476ef4dd10aa891e9e73f3b4ab43f4adf030ab492df2c9cbcd5bf520ec8" name="mlocate-debugsource" arch="x86_64">
  <version epoch="0" ver="0.26" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-25" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.26-27" date="1603368000">- Don't prune bind mounts on ostree based systems, prune the deployments folder
  there to avoid duplications.
- Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.26-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.26-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e9a5762b792da583e3673279c8fec6f34ffc3afe5c041da5f70ffdb069ac9ee0" name="mokutil-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.7.2" rel="4.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-1" date="1745841600">- Bump version to 0.7.2 upstream tag
- Resolves: #RHEL-88741</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-2" date="1747051200">- Rebase several patches from upstream which:
  - Introduce --is-sb-enabled parameter and better return codes
  - Remove unused int_to_b64()
  - Show help on unsupported systems
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-3" date="1751025600">- Return zero in case --test-key is enrolled
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-4" date="1765281600">- Bump release
- Resolves: #RHEL-90837</changelog>
</package>
<package pkgid="4c49629a550507faf0a8f90d1b84bb290d9a926c83775508e875747abddb68f2" name="mokutil-debugsource" arch="x86_64">
  <version epoch="2" ver="0.7.2" rel="4.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-1" date="1745841600">- Bump version to 0.7.2 upstream tag
- Resolves: #RHEL-88741</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-2" date="1747051200">- Rebase several patches from upstream which:
  - Introduce --is-sb-enabled parameter and better return codes
  - Remove unused int_to_b64()
  - Show help on unsupported systems
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-3" date="1751025600">- Return zero in case --test-key is enrolled
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-4" date="1765281600">- Bump release
- Resolves: #RHEL-90837</changelog>
</package>
<package pkgid="9f1cfedce7075d9f839e7dcf2f083344f5fe1e78fbac5f40c420aa9da698014c" name="mpfr-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="b89cad2e39366220e0c6c2fd164006d87277b942898f040f2a066f5f01221ef7" name="mpfr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="647dfde231b8d885cd66f7a0d966de018d0c31b091ae23e9ef3b64c2fe09928e" name="mpfr-debugsource" arch="i686">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="6f096b7106fc2401a9e3fdce47271998a9cb2f34529385203f7d742e379dfd50" name="mpfr-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="b0cafb9dec430f2bc23448d6d86ac0aca2e507434ab3b8b135a50c58b8130dae" name="mtools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.26" rel="5.el9_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 4.0.26-5" date="1771243200">- Increase error message buffer size
- Prevent a leak of iconv_t
- Prevent a file descriptor leak</changelog>
</package>
<package pkgid="a49d9cf93bcb4bd9d07fb15b6c0a64950af516b397df1279aff5ee3e62c63db0" name="mtools-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.26" rel="5.el9_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 4.0.26-5" date="1771243200">- Increase error message buffer size
- Prevent a leak of iconv_t
- Prevent a file descriptor leak</changelog>
</package>
<package pkgid="e65f111687f708e77c9217da07720f59bd253de42d5951e64a8a14032d44e645" name="mtr-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.94" rel="6.el9_4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:0.94-5" date="1713787200">- Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:0.94-6" date="1713787201">- add smoke test</changelog>
</package>
<package pkgid="71c5e65d089f66e4df8e887648dcc5c4837d1ff0f72db63b36442e48088b963f" name="mtr-debugsource" arch="x86_64">
  <version epoch="2" ver="0.94" rel="6.el9_4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:0.94-5" date="1713787200">- Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:0.94-6" date="1713787201">- add smoke test</changelog>
</package>
<package pkgid="326bb31b1208c0424bf204477f366d84b005cafc6595fa61cdb23a6f96ec5576" name="nano-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="7.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.6.1-6" date="1719835200">- fix emergency file replacement vulnerability (RHEL-35237)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.6.1-7" date="1733918400">- avoid a leak when linter aborts after producing parsable output (RHEL-51175)</changelog>
</package>
<package pkgid="3eaec3674bc45643118ca5bcca24abf934d5b267ecd1710d25a0ad264ab11170" name="nano-debugsource" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="7.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.6.1-6" date="1719835200">- fix emergency file replacement vulnerability (RHEL-35237)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.6.1-7" date="1733918400">- avoid a leak when linter aborts after producing parsable output (RHEL-51175)</changelog>
</package>
<package pkgid="185cc7057ac34a0a3559c56e85ce93bcb690824cea55ff6c94f5d7b34b7daa65" name="ncurses-debuginfo" arch="i686">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="83c67aff502ebcdf755c94f2b0a00970d1b1453735cb449d63bb00095a791f20" name="ncurses-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="e1e0cde0c2609585ef8f2dd4b70ea0079ee27f4c2677dd42c2b53236c2c4efa5" name="ncurses-debugsource" arch="i686">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="3bd5f1ed3c65a168b4750c0c47d3d00b00099eea19b4f6f837bb32ea449b9309" name="ncurses-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="f69cf3dd52c7cfa3b15e8be3e81aed2d5802b1568d52fdf4c768fdfc7586aa90" name="ncurses-libs-debuginfo" arch="i686">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="a6eb95ce2a249a190e79621dcfb20b5ad6fe2617349d4ccf0ce93a33aa0744ed" name="ncurses-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="8aa45a739f085d3ad449c86469bd3a2470286a5d0a7ce03716664f6c8fd07daa" name="ndctl-debuginfo" arch="i686">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="da98c478159bb0b3693996c7a2094a48394358f1445c1b56c1f6aca72031a166" name="ndctl-debuginfo" arch="x86_64">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="df2eab8023a8e425a7f4fc672b10c3ec6c791a0692b320dbdeb6210084bbc65f" name="ndctl-debugsource" arch="i686">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="b7ecbd8eb046b840d411904d1e6b69b213dc25da35c851e1aa71f4057a30d7e5" name="ndctl-debugsource" arch="x86_64">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="0d4ee3df10edb29fff62e32bb48659acaa3782d9e320623d35f7785451d883ee" name="ndctl-libs-debuginfo" arch="i686">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="4685f42fce617695e1691d08b5352d88f29077561a54561f983cc0590750da6f" name="ndctl-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="82" rel="1.el9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-1" date="1700049600">- Rebase to v78
- Add support for legacy monitor.conf file location
- Fix a test failure.
- Resolves: RHEL-10382
- Resolves: RHEL-8204
- Resolves: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 78-2" date="1721995200">- Add explicit package version requirements. (Jeff Moyer)
- Related: RHEL-29151</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756296000">- Rebase to v82
- Resolve: RHEL-97669</changelog>
</package>
<package pkgid="5e642dcc627c1b99084c5cbf2b00b8963141263b8bdc754f0dd16eeba5441cf8" name="net-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0" rel="0.64.20160912git.el9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0-0.63.20160912git" date="1715256000">- Resolves: RHEL-31932 - Addressing findings from static application security testing</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0-0.64.20160912git" date="1718712000">- Resolves: RHEL-40958 - Segmentation fault (core dumped) on netstat -s</changelog>
</package>
<package pkgid="d83a89a33bc1c7a370bb76c0f0223c6c2c7d2b648d748c6ac02b96c18948fb42" name="net-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0" rel="0.64.20160912git.el9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0-0.63.20160912git" date="1715256000">- Resolves: RHEL-31932 - Addressing findings from static application security testing</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0-0.64.20160912git" date="1718712000">- Resolves: RHEL-40958 - Segmentation fault (core dumped) on netstat -s</changelog>
</package>
<package pkgid="0810080021e7c51f0128f024720078e30f62f22ff261382396f90a8dba643a2d" name="netlabel_tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.30.0" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30.0-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.30.0-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.30.0-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0ae86704bcd933e5aa32178fdb53807fd5c19f2940a2db122deda0a1a5343e5e" name="netlabel_tools-debugsource" arch="x86_64">
  <version epoch="0" ver="0.30.0" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30.0-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.30.0-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.30.0-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4f493e4d690232f7a982883ff26a2de24695ce7a1e4883c1f02413fdab7537cc" name="nettle-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.1" rel="1.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.9.1-1" date="1698840000">- Update to nettle 3.9.1 (RHEL-14890)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.10.1-1" date="1739534400">- Update to nettle 3.10.1 (RHEL-52740)</changelog>
</package>
<package pkgid="e982527f634d221ac389781aa9953b25d62a3644cd1a489867f7c547d391482f" name="nettle-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="1.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.9.1-1" date="1698840000">- Update to nettle 3.9.1 (RHEL-14890)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.10.1-1" date="1739534400">- Update to nettle 3.10.1 (RHEL-52740)</changelog>
</package>
<package pkgid="6211a038104cef412fd6d72161276a4faf220134b1ea0419c8e7da79ddbb2348" name="nettle-debugsource" arch="i686">
  <version epoch="0" ver="3.10.1" rel="1.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.9.1-1" date="1698840000">- Update to nettle 3.9.1 (RHEL-14890)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.10.1-1" date="1739534400">- Update to nettle 3.10.1 (RHEL-52740)</changelog>
</package>
<package pkgid="75180974ddb9185984704322a893834075eb0ef0d3c9fbf9bc5cb3d38162a84d" name="nettle-debugsource" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="1.el9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.9.1-1" date="1698840000">- Update to nettle 3.9.1 (RHEL-14890)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.10.1-1" date="1739534400">- Update to nettle 3.10.1 (RHEL-52740)</changelog>
</package>
<package pkgid="f4c60701180f78f18b11e4b58328905a02fa67f0d707bd77448fb0703a3370e1" name="newt-debuginfo" arch="i686">
  <version epoch="0" ver="0.52.21" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 0.52.21-5" date="1571659200">- disable python2 subpackage on fedora &gt;= 32 (#1763073)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="60340f0aa2ad9cbe586421f5bc9c0f806b23d80267770f9cfdce1cdeb5be9b77" name="newt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 0.52.21-5" date="1571659200">- disable python2 subpackage on fedora &gt;= 32 (#1763073)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e161bf972b8a51004c4c84ee6e591efdfd8949daf2be3afc4de83ebf77759ac6" name="newt-debugsource" arch="i686">
  <version epoch="0" ver="0.52.21" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 0.52.21-5" date="1571659200">- disable python2 subpackage on fedora &gt;= 32 (#1763073)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a3764b50dad69af63b1b5b723ea6fe2e4d4b9e79b2a13c83f37ec8e40d8f05fd" name="newt-debugsource" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 0.52.21-5" date="1571659200">- disable python2 subpackage on fedora &gt;= 32 (#1763073)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.52.21-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.52.21-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.52.21-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="41d520cbd7fad92911a0659b04b576f2c7bc670a0ea0f50a0e7b5f3aec14d785" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="f5bb6145542c28cb77c64aa6317ed3217a528c6865e2a810879cbd05f6f4a45d" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="1399cc7c4fc21f32dc7f1be4761dd830f39a3c0825c16562df1eb0eaa41c5591" name="nfs-utils-debugsource" arch="i686">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="acb98c6d118e0ee860fa55113c9cc0f18af210b4b881750fc217f2f9e002d464" name="nfs-utils-debugsource" arch="x86_64">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="e01e921df8d800ab30f3986b744533d5b71b51e7365dfc74045df07ad790e82e" name="nfs4-acl-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="3.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.4.2-0" date="1668513600">- Updated to the latest upstream release: nfs4-acl-tools-0.4.2 (bz 2059052)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.4.2-1" date="1676289600">- nfs4_getfacl: Initialize acl pointer to NULL (bz 2144829)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.4.2-2" date="1686052800">- Rebuild: nfs4_getfacl: Initialize acl pointer to NULL (bz 2144829)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 0.4.2-3" date="1708516800">- Prepare gating tests (rhel-26256)</changelog>
</package>
<package pkgid="d774700d7265470f40619a52e1166d308d04d69a1e330dc064f9a57e5c911940" name="nfs4-acl-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="3.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.4.2-0" date="1668513600">- Updated to the latest upstream release: nfs4-acl-tools-0.4.2 (bz 2059052)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.4.2-1" date="1676289600">- nfs4_getfacl: Initialize acl pointer to NULL (bz 2144829)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.4.2-2" date="1686052800">- Rebuild: nfs4_getfacl: Initialize acl pointer to NULL (bz 2144829)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 0.4.2-3" date="1708516800">- Prepare gating tests (rhel-26256)</changelog>
</package>
<package pkgid="89d74d0f5de4eb9bf3993463e6a350080fc7166010106eefe62402dde5a23c63" name="nftables-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.9" rel="6.el9_7"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
</package>
<package pkgid="f938f0eb052c9468c8885bf55432fc4606f283b457e6824f0523e1186981000a" name="nftables-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="6.el9_7"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
</package>
<package pkgid="2a240dd18875710f9ef78727f751c33afc0d7501dd68cba5c8d64866031099f4" name="nftables-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="68f41164a425914d7ff0344e9e62d2ddec53c345cdd5c85af8b46d145d308887" name="nftables-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="d062de182363d01e846eee04c635e7875983c58280de6948b11e7e0267c67903" name="nftables-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.9" rel="9.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-8.el9]" date="1784721600">- spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
- tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
- tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
- tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
- tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
- tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
- tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
- tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
- json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
- tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
- rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
- datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
- tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
- segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
- segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
- src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
- segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
- cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
- tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
- tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
- tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
- mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
- segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
- cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
- cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
- cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
- parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
- json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
- tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
- expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
- expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
- netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
- tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
- monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
- tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
- rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
- doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
- tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
- tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
- tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
- tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
- tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
- datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
- optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
- src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
- doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
- fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
- monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
- monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
- monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
- mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
- mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
- fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
- src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
- segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
- json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
- tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
- src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
- doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
- mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
- evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
- rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
- tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
- fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
- fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
- tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
- json: reject too long interface names (Phil Sutter) [RHEL-190549]
- tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
- cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
- parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
- rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
- parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
- debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
- tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
- src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
- netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
- tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
- tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
- tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
- netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
- netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
- json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
- json: prevent null deref if chain-&gt;policy is not set (Phil Sutter) [RHEL-190549]
- tests: py: fix json single-flag output for fib &amp; synproxy (Phil Sutter) [RHEL-190549]
- tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
- netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
- netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
- json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
- json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
- json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
- json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
- tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
- json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
- json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
- parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
- doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
- netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
- parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
- optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
- evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
- parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
- parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
- parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
- cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
- optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
- cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
- evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
- evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
- json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
- optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
- optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
- tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
- evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
- json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
- tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
- evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
- evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
- parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
- netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
- src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
- tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
- src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
- segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
- evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
- segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
- payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
- payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
- evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
- fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
- evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
- parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
- parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
- datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
- tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
- ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
- netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
- evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
- intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
- src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
- intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
- parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
- intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
- optimize: compare expression length (Phil Sutter) [RHEL-190549]
- tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
- json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
- json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
- tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
- src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
- mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
- mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
- rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
- src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
- cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
- tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
- proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
- tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
- libnftables: Zero ctx-&gt;vars after freeing it (Phil Sutter) [RHEL-190549]
- cache: position does not require full cache (Phil Sutter) [RHEL-190549]
- cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
- cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
- cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
- cache: consolidate reset command (Phil Sutter) [RHEL-190549]
- cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
- cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
- cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
- cache: reset filter for each command (Phil Sutter) [RHEL-190549]
- parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
- parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
- json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
- parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
- parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
- datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
- cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
- datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
- optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
- parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
- libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
- optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
- segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
- evaluate: set on expr-&gt;len for catchall set elements (Phil Sutter) [RHEL-190549]
- parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
- intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
- src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
- tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
- cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
- cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
- monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
- scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
- evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
- evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
- cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
- doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
- mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
- doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
- tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
- tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
- tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
- src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
- evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
- netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
- parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
- tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
- nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
- rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
- parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
- parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
- src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
- tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
- netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
- evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
- cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
- evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
- evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
- json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
- rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
- evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
- evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
- evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
- evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
- doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
- tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
- parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
- netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
- parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
- tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
- evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
- src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
- evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
- meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
- parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
- evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
- parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
- tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
- parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
- evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
- monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
- evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
- evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
- evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
- evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
- tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
- evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
- tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
- tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
- evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
- tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
- tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
- json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
- src: expand create commands (Phil Sutter) [RHEL-190549]
- tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
- tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
- netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
- src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
- src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
- evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
- meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
- tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
- tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
- parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
- tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
- tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-9.el9]" date="1785326400">- netlink: add and use nft_data_memcpy helper (Phil Sutter) [RHEL-190549]</changelog>
</package>
<package pkgid="ea1c4c5a1f856d3a4e5d1807f5bee7ae704a0c91f7c486effb03e1f0f7e3cf9d" name="nftables-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="9.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-8.el9]" date="1784721600">- spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
- tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
- tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
- tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
- tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
- tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
- tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
- tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
- json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
- tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
- rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
- datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
- tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
- segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
- segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
- src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
- segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
- cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
- tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
- tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
- tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
- mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
- segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
- cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
- cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
- cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
- parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
- json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
- tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
- expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
- expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
- netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
- tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
- monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
- tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
- rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
- doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
- tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
- tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
- tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
- tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
- tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
- datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
- optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
- src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
- doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
- fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
- monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
- monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
- monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
- mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
- mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
- fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
- src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
- segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
- json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
- tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
- src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
- doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
- mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
- evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
- rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
- tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
- fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
- fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
- tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
- json: reject too long interface names (Phil Sutter) [RHEL-190549]
- tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
- cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
- parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
- rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
- parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
- debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
- tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
- src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
- netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
- tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
- tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
- tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
- netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
- netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
- json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
- json: prevent null deref if chain-&gt;policy is not set (Phil Sutter) [RHEL-190549]
- tests: py: fix json single-flag output for fib &amp; synproxy (Phil Sutter) [RHEL-190549]
- tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
- netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
- netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
- json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
- json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
- json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
- json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
- tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
- json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
- json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
- parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
- doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
- netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
- parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
- optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
- evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
- parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
- parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
- parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
- cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
- optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
- cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
- evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
- evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
- json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
- optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
- optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
- tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
- evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
- json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
- tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
- evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
- evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
- parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
- netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
- src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
- tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
- src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
- segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
- evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
- segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
- payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
- payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
- evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
- fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
- evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
- parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
- parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
- datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
- tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
- ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
- netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
- evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
- intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
- src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
- intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
- parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
- intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
- optimize: compare expression length (Phil Sutter) [RHEL-190549]
- tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
- json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
- json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
- tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
- src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
- mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
- mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
- rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
- src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
- cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
- tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
- proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
- tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
- libnftables: Zero ctx-&gt;vars after freeing it (Phil Sutter) [RHEL-190549]
- cache: position does not require full cache (Phil Sutter) [RHEL-190549]
- cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
- cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
- cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
- cache: consolidate reset command (Phil Sutter) [RHEL-190549]
- cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
- cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
- cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
- cache: reset filter for each command (Phil Sutter) [RHEL-190549]
- parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
- parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
- json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
- parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
- parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
- datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
- cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
- datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
- optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
- parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
- libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
- optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
- segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
- evaluate: set on expr-&gt;len for catchall set elements (Phil Sutter) [RHEL-190549]
- parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
- intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
- src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
- tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
- cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
- cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
- monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
- scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
- evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
- evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
- cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
- doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
- mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
- doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
- tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
- tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
- tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
- src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
- evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
- netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
- parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
- tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
- nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
- rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
- parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
- parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
- src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
- tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
- netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
- evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
- cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
- evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
- evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
- json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
- rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
- evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
- evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
- evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
- evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
- doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
- tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
- parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
- netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
- parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
- tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
- evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
- src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
- evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
- meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
- parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
- evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
- parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
- tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
- parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
- evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
- monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
- evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
- evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
- evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
- evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
- tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
- evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
- tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
- tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
- evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
- tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
- tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
- json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
- src: expand create commands (Phil Sutter) [RHEL-190549]
- tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
- tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
- netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
- src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
- src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
- evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
- meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
- tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
- tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
- parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
- tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
- tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-9.el9]" date="1785326400">- netlink: add and use nft_data_memcpy helper (Phil Sutter) [RHEL-190549]</changelog>
</package>
<package pkgid="a95855a1a63f5cc62f282081462fd4f5c41c975e39b2479678de3e82e00820ee" name="nftables-debugsource" arch="i686">
  <version epoch="1" ver="1.0.9" rel="6.el9_7"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
</package>
<package pkgid="8388945fd607d6acc07bf7cbde041754ea6da7c6e5aad539d5ff9ca12afb36ee" name="nftables-debugsource" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="6.el9_7"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
</package>
<package pkgid="baa9721bad3e8880230f6e0650726e7fc40477552e4f4ec359f9dbed560eaaa9" name="nftables-debugsource" arch="i686">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="f12efca8f091fbb65d711e8b05d2566a147c85f641bd2154ec45ee6e3119a455" name="nftables-debugsource" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="8798b717e6fedb4b6698d38e9cd807ba8ebb1c78abb361c26ba1a6d5852697b2" name="nftables-debugsource" arch="i686">
  <version epoch="1" ver="1.0.9" rel="9.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-8.el9]" date="1784721600">- spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
- tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
- tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
- tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
- tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
- tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
- tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
- tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
- json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
- tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
- rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
- datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
- tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
- segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
- segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
- src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
- segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
- cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
- tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
- tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
- tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
- mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
- segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
- cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
- cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
- cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
- parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
- json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
- tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
- expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
- expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
- netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
- tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
- monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
- tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
- rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
- doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
- tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
- tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
- tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
- tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
- tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
- datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
- optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
- src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
- doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
- fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
- monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
- monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
- monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
- mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
- mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
- fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
- src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
- segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
- json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
- tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
- src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
- doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
- mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
- evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
- rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
- tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
- fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
- fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
- tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
- json: reject too long interface names (Phil Sutter) [RHEL-190549]
- tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
- cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
- parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
- rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
- parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
- debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
- tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
- src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
- netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
- tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
- tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
- tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
- netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
- netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
- json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
- json: prevent null deref if chain-&gt;policy is not set (Phil Sutter) [RHEL-190549]
- tests: py: fix json single-flag output for fib &amp; synproxy (Phil Sutter) [RHEL-190549]
- tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
- netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
- netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
- json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
- json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
- json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
- json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
- tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
- json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
- json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
- parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
- doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
- netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
- parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
- optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
- evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
- parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
- parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
- parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
- cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
- optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
- cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
- evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
- evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
- json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
- optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
- optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
- tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
- evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
- json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
- tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
- evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
- evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
- parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
- netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
- src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
- tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
- src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
- segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
- evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
- segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
- payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
- payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
- evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
- fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
- evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
- parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
- parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
- datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
- tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
- ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
- netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
- evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
- intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
- src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
- intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
- parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
- intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
- optimize: compare expression length (Phil Sutter) [RHEL-190549]
- tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
- json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
- json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
- tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
- src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
- mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
- mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
- rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
- src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
- cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
- tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
- proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
- tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
- libnftables: Zero ctx-&gt;vars after freeing it (Phil Sutter) [RHEL-190549]
- cache: position does not require full cache (Phil Sutter) [RHEL-190549]
- cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
- cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
- cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
- cache: consolidate reset command (Phil Sutter) [RHEL-190549]
- cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
- cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
- cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
- cache: reset filter for each command (Phil Sutter) [RHEL-190549]
- parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
- parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
- json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
- parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
- parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
- datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
- cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
- datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
- optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
- parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
- libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
- optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
- segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
- evaluate: set on expr-&gt;len for catchall set elements (Phil Sutter) [RHEL-190549]
- parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
- intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
- src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
- tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
- cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
- cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
- monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
- scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
- evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
- evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
- cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
- doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
- mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
- doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
- tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
- tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
- tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
- src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
- evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
- netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
- parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
- tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
- nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
- rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
- parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
- parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
- src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
- tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
- netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
- evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
- cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
- evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
- evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
- json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
- rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
- evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
- evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
- evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
- evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
- doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
- tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
- parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
- netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
- parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
- tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
- evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
- src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
- evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
- meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
- parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
- evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
- parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
- tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
- parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
- evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
- monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
- evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
- evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
- evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
- evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
- tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
- evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
- tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
- tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
- evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
- tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
- tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
- json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
- src: expand create commands (Phil Sutter) [RHEL-190549]
- tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
- tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
- netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
- src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
- src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
- evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
- meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
- tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
- tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
- parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
- tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
- tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-9.el9]" date="1785326400">- netlink: add and use nft_data_memcpy helper (Phil Sutter) [RHEL-190549]</changelog>
</package>
<package pkgid="0c31e88e35c2dfd0d19dafa8b71303f3123dc8478b83ae34a2158474c75a915e" name="nftables-debugsource" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="9.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-8.el9]" date="1784721600">- spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
- tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
- tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
- tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
- tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
- tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
- tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
- tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
- json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
- tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
- rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
- datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
- tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
- segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
- segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
- src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
- segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
- cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
- tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
- tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
- tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
- mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
- segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
- cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
- cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
- cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
- parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
- json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
- tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
- expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
- expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
- netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
- tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
- monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
- tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
- rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
- doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
- tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
- tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
- tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
- tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
- tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
- datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
- optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
- src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
- doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
- fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
- monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
- monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
- monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
- mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
- mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
- fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
- src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
- segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
- json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
- tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
- src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
- doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
- mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
- evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
- rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
- tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
- fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
- fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
- tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
- json: reject too long interface names (Phil Sutter) [RHEL-190549]
- tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
- cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
- parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
- rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
- parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
- debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
- tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
- src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
- netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
- tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
- tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
- tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
- netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
- netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
- json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
- json: prevent null deref if chain-&gt;policy is not set (Phil Sutter) [RHEL-190549]
- tests: py: fix json single-flag output for fib &amp; synproxy (Phil Sutter) [RHEL-190549]
- tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
- netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
- netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
- json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
- json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
- json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
- json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
- tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
- json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
- json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
- parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
- doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
- netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
- parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
- optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
- evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
- parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
- parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
- parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
- cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
- optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
- cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
- evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
- evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
- json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
- optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
- optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
- tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
- evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
- json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
- tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
- evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
- evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
- parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
- netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
- src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
- tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
- src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
- segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
- evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
- segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
- payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
- payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
- evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
- fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
- evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
- parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
- parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
- datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
- tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
- ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
- netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
- evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
- intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
- src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
- intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
- parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
- intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
- optimize: compare expression length (Phil Sutter) [RHEL-190549]
- tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
- json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
- json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
- tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
- src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
- mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
- mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
- rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
- src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
- cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
- tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
- proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
- tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
- libnftables: Zero ctx-&gt;vars after freeing it (Phil Sutter) [RHEL-190549]
- cache: position does not require full cache (Phil Sutter) [RHEL-190549]
- cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
- cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
- cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
- cache: consolidate reset command (Phil Sutter) [RHEL-190549]
- cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
- cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
- cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
- cache: reset filter for each command (Phil Sutter) [RHEL-190549]
- parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
- parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
- json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
- parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
- parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
- datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
- cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
- datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
- optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
- parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
- libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
- optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
- segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
- evaluate: set on expr-&gt;len for catchall set elements (Phil Sutter) [RHEL-190549]
- parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
- intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
- src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
- tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
- cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
- cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
- monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
- scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
- evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
- evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
- cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
- doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
- mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
- doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
- tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
- tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
- tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
- src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
- evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
- netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
- parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
- tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
- nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
- rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
- parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
- parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
- src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
- tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
- netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
- evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
- cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
- evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
- evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
- json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
- rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
- evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
- evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
- evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
- evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
- doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
- tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
- parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
- netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
- parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
- tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
- evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
- src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
- evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
- meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
- parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
- evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
- parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
- tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
- parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
- evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
- monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
- evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
- evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
- evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
- evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
- tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
- evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
- tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
- tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
- evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
- tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
- tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
- json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
- src: expand create commands (Phil Sutter) [RHEL-190549]
- tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
- tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
- netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
- src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
- src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
- evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
- meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
- tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
- tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
- parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
- tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
- tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-9.el9]" date="1785326400">- netlink: add and use nft_data_memcpy helper (Phil Sutter) [RHEL-190549]</changelog>
</package>
<package pkgid="bdfeb4c4b716ffe0a07104946984b413c9ad75c5de258f4c04cbe5e5351e05e8" name="nghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="a652c85e78aef8dc7d378c2ed63de5f337c3c0d04ad0d19e3a50e6223ec6f755" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="61f78fd57d6c97eb32fd74d0eb5d76ac236ee80ff95dd7e66fcf798b6fb3f8a2" name="nghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="63ff0a427be6413022496d21839e225b5175422bbdcb289efec81db16dfad099" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="989142095fdf44cfcd4fe77da5e2ab178c5c4f0d1002a691bf893d6d261d683b" name="nghttp2-debugsource" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="efaf862d4c7ddc38e9eb980abbb7bb21abe55a84be692c50417d4a1e77d2a9c1" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="04c755893597759d33816460e74666500d9bf6ea010d60b569096bc78351e309" name="nghttp2-debugsource" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="041c13b85bdf9787645d8a65afd07db267a7f7aed2eaadd1ef12aa7a47667292" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="c213bdc815e2dd8ae5879555ec2e08cf7d5bd02094cbfe04d9a6d83824b386e8" name="npth-debuginfo" arch="i686">
  <version epoch="0" ver="1.6" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="be2bd09f9229df12ad9993b9fd25bdda3741b15f1f953989759efbc2fab3c641" name="npth-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fd6b50fc821accddec5072a5f92168612d39e46f8374fda1602ccdaf6dd48740" name="npth-debugsource" arch="i686">
  <version epoch="0" ver="1.6" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="aae6a083ecec06a8d04c730618e858b7c301d6266ac8af894ab78431a69da1d1" name="npth-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2c2e39bc9b7b156c14964e26ced7539944e246d3d8f02d6b6d59b3be186c24d8" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="475b9d6b88a393d12fffd63fa9253e6eb6dfe9053d57e58e876c32c235a1cfe0" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="7d4c83dfc5ea6ac87a8995dcd929d9bd2c412355c353d43b56018401d30352ee" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="12b0036bd6f37cbd2d439d10cd395e68c120059d95791c4fcb8c85cb33180e1c" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="6524cde4bb657aff25c8ad0a88a685ee8b640f263e7c60904c2686f9a5051189" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="ff586172c01e8562790bc4439de714ef5aab2500e538479e6ab20b181d686e9c" name="numactl-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.19" rel="3.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-9" date="1669204800">- Dummy release to get s390x binary in errata</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.16-2" date="1694692800">- fix typo in memhog.8</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.18-1" date="1722340800">- rebase to v2.0.18</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-1" date="1731931200">- rebase to v2.0.19</changelog>
</package>
<package pkgid="9216be1eb0e5da8fef4fa1f5e0e42e8197dbf43db0754bfb08dc4e8bed800b55" name="numactl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="3.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-9" date="1669204800">- Dummy release to get s390x binary in errata</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.16-2" date="1694692800">- fix typo in memhog.8</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.18-1" date="1722340800">- rebase to v2.0.18</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-1" date="1731931200">- rebase to v2.0.19</changelog>
</package>
<package pkgid="6cbdc074f1ddd70a4c677a9fd5bf067530afe8a8f386300a2c24fece1c3a8839" name="numactl-debugsource" arch="i686">
  <version epoch="0" ver="2.0.19" rel="3.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-9" date="1669204800">- Dummy release to get s390x binary in errata</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.16-2" date="1694692800">- fix typo in memhog.8</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.18-1" date="1722340800">- rebase to v2.0.18</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-1" date="1731931200">- rebase to v2.0.19</changelog>
</package>
<package pkgid="89267323e65fb69cf83e4be5062471e1bc9ac017bc0420737023f70403acfd2e" name="numactl-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="3.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-9" date="1669204800">- Dummy release to get s390x binary in errata</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.16-2" date="1694692800">- fix typo in memhog.8</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.18-1" date="1722340800">- rebase to v2.0.18</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-1" date="1731931200">- rebase to v2.0.19</changelog>
</package>
<package pkgid="c15899bc953d7186b89c8d791e9b91018a8666ae11ab4712c8972c3eff426917" name="numactl-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.19" rel="3.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-9" date="1669204800">- Dummy release to get s390x binary in errata</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.16-2" date="1694692800">- fix typo in memhog.8</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.18-1" date="1722340800">- rebase to v2.0.18</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-1" date="1731931200">- rebase to v2.0.19</changelog>
</package>
<package pkgid="9a298a11b32ea5c7cd9f26657aa2b7e3643fb6fd46900c048187518f5bc82a20" name="numactl-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="3.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-9" date="1669204800">- Dummy release to get s390x binary in errata</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.16-2" date="1694692800">- fix typo in memhog.8</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.18-1" date="1722340800">- rebase to v2.0.18</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-1" date="1731931200">- rebase to v2.0.19</changelog>
</package>
<package pkgid="3b64786e5120404ccfa32036a39b6e8d82051d2e05b3bac4526c55c438009d9c" name="numad-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5" rel="37.20150602git.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.5-37.20150602git" date="1700049600">- recognize the -m option (RHEL-16571)</changelog>
</package>
<package pkgid="2231eb9b5f15dea786ed00791fd9993412a2f9cf7af0196d3ca36d43d5d6639a" name="numad-debugsource" arch="x86_64">
  <version epoch="0" ver="0.5" rel="37.20150602git.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.5-37.20150602git" date="1700049600">- recognize the -m option (RHEL-16571)</changelog>
</package>
<package pkgid="616adae2922faa12a600135807242f5ac279d19626a8064885f15e8393a8e3a3" name="numatop-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="9.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.3.3" date="1702036800">- Add Power10 support</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.1" date="1706788800">- Add initial support for EMR</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.5" date="1735819200">- Fix ncures race issue</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.6" date="1735819201">- Add support for intel  GNR and SRF</changelog>
</package>
<package pkgid="6e7c6904374590fab6f8653933754b1af04ba04b340f7323093623f1818a2039" name="numatop-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4" rel="9.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.3.3" date="1702036800">- Add Power10 support</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.1" date="1706788800">- Add initial support for EMR</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.5" date="1735819200">- Fix ncures race issue</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.6" date="1735819201">- Add support for intel  GNR and SRF</changelog>
</package>
<package pkgid="9d4801b7c93a2805a04b26650ce5a84d650ed03a3544cad217bcdb0307cf1a39" name="nvme-cli-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.16" rel="1.el9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.9.1-5" date="1722945600">- Fix RHEL-38372</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.9.1-6" date="1724328000">- Install NetworkManager override for nbft interfaces
- Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.10.2-1" date="1728302400">- Update to version 2.10.2 RHEL-60536</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-1" date="1731412800">- Update to version v2.11 RHEL-67144</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-2" date="1731672000">- Rebuild for RHEL-67144</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-3" date="1737028800">- NetApp fixes for RHEL-71521</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-4" date="1737720000">- Add kernel-headers to BuildRequires (RHEL-70856)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-5" date="1739448000">- Fix for RHEL-10433</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.13-1" date="1746014400">- Update to version 2.13</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.16-1" date="1763726400">- Update to version 2.16 (RHEL-129947)</changelog>
</package>
<package pkgid="5361bf92d8934c77d07484718640588914b5bd81c7ae1d6e2a40bc328897c707" name="nvme-cli-debugsource" arch="x86_64">
  <version epoch="0" ver="2.16" rel="1.el9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.9.1-5" date="1722945600">- Fix RHEL-38372</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.9.1-6" date="1724328000">- Install NetworkManager override for nbft interfaces
- Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.10.2-1" date="1728302400">- Update to version 2.10.2 RHEL-60536</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-1" date="1731412800">- Update to version v2.11 RHEL-67144</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-2" date="1731672000">- Rebuild for RHEL-67144</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-3" date="1737028800">- NetApp fixes for RHEL-71521</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-4" date="1737720000">- Add kernel-headers to BuildRequires (RHEL-70856)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.11-5" date="1739448000">- Fix for RHEL-10433</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.13-1" date="1746014400">- Update to version 2.13</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.16-1" date="1763726400">- Update to version 2.16 (RHEL-129947)</changelog>
</package>
<package pkgid="3f8a0698e376900dbe148df20d7b031732710d9c04acfd12ed7cdc791da164c6" name="oniguruma-debuginfo" arch="i686">
  <version epoch="0" ver="6.9.6" rel="1.el9.6"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.1.rc2" date="1602504000">- 6.9.6 rc2
- Apply upstream patch to keep binary compatibility with 6.9.5</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.2.rc3" date="1602936000">- 6.9.6 rc3</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.3.rc3" date="1603195200">- Apply upstream patch for upstream bug 221
  - Revert change for false CVE-2020-26159 issue
    https://github.com/kkos/oniguruma/issues/221</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.4.rc4" date="1603281600">- 6.9.6 rc4</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-1" date="1604577600">- 6.9.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.9.6-1.2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 6.9.6-1.5" date="1639051200">- Enable LTO
  Resolves: #1990100</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.9.6-1.6" date="1718107200">- Fix memory leaks, initialize memory
  Resolves: RHEL-31794</changelog>
</package>
<package pkgid="ff0c82482c1bfd96f5319402407420c8dbebbd197b66fe4a99f732ad3963f708" name="oniguruma-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9.6" rel="1.el9.6"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.1.rc2" date="1602504000">- 6.9.6 rc2
- Apply upstream patch to keep binary compatibility with 6.9.5</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.2.rc3" date="1602936000">- 6.9.6 rc3</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.3.rc3" date="1603195200">- Apply upstream patch for upstream bug 221
  - Revert change for false CVE-2020-26159 issue
    https://github.com/kkos/oniguruma/issues/221</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.4.rc4" date="1603281600">- 6.9.6 rc4</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-1" date="1604577600">- 6.9.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.9.6-1.2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 6.9.6-1.5" date="1639051200">- Enable LTO
  Resolves: #1990100</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.9.6-1.6" date="1718107200">- Fix memory leaks, initialize memory
  Resolves: RHEL-31794</changelog>
</package>
<package pkgid="56a3b7b0956b45cfb3a3aa3a3c7806e45afe0fbe0bbf8d8012bde8c0b7e12aab" name="oniguruma-debugsource" arch="i686">
  <version epoch="0" ver="6.9.6" rel="1.el9.6"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.1.rc2" date="1602504000">- 6.9.6 rc2
- Apply upstream patch to keep binary compatibility with 6.9.5</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.2.rc3" date="1602936000">- 6.9.6 rc3</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.3.rc3" date="1603195200">- Apply upstream patch for upstream bug 221
  - Revert change for false CVE-2020-26159 issue
    https://github.com/kkos/oniguruma/issues/221</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.4.rc4" date="1603281600">- 6.9.6 rc4</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-1" date="1604577600">- 6.9.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.9.6-1.2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 6.9.6-1.5" date="1639051200">- Enable LTO
  Resolves: #1990100</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.9.6-1.6" date="1718107200">- Fix memory leaks, initialize memory
  Resolves: RHEL-31794</changelog>
</package>
<package pkgid="1007fd330f3568eba72fb2b22c9f9cf2f10254b9b3ad8e4c17772b1ef8032f3e" name="oniguruma-debugsource" arch="x86_64">
  <version epoch="0" ver="6.9.6" rel="1.el9.6"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.1.rc2" date="1602504000">- 6.9.6 rc2
- Apply upstream patch to keep binary compatibility with 6.9.5</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.2.rc3" date="1602936000">- 6.9.6 rc3</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.3.rc3" date="1603195200">- Apply upstream patch for upstream bug 221
  - Revert change for false CVE-2020-26159 issue
    https://github.com/kkos/oniguruma/issues/221</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-0.4.rc4" date="1603281600">- 6.9.6 rc4</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 6.9.6-1" date="1604577600">- 6.9.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.9.6-1.2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.9.6-1.4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 6.9.6-1.5" date="1639051200">- Enable LTO
  Resolves: #1990100</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.9.6-1.6" date="1718107200">- Fix memory leaks, initialize memory
  Resolves: RHEL-31794</changelog>
</package>
<package pkgid="ecd8affe4ca848635d12490cb324ede5231051dec22e8f0444eb75a0d3a34132" name="opencryptoki-ccatok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="c4bbf467eb149b19c8701acf318a556b73379d69505aed27dac6911818bc7e2f" name="opencryptoki-ccatok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="4fb7dc8e4cbddddf19974a6d18324321dd2131e96663a03fdf4677cada465f25" name="opencryptoki-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="16824304b569dc7e3ed3f9426880ab4668947198191faf90cf8b598681c4ac57" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="544065d9e5748a802eaa7f8728d6c7859982f781435f0b7c5f1e012c554c533b" name="opencryptoki-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="cc8a9ab6d2ca00ead3a8d8695bddd7e9935a367e770556ba9b796838f563d175" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="c61c7a4c60ae9fa162b109abd6118421ffff7110433ba599c37ebd227dd759b2" name="opencryptoki-debugsource" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="453a22fa7b41ff7239acf05297b1230343f7dbc8052a78fd5e50bc43d0959798" name="opencryptoki-debugsource" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="4f5704d679f87844173d1db3982d4407a804e43812d7fea94f6c659a3330cf23" name="opencryptoki-debugsource" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="64aa719332e696454540c7d70042999163a2e260ba0f480ab1e69d24d287a78e" name="opencryptoki-debugsource" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="dd262f247107607fcad0aabec04bc32ab38e64089a9147ba73f5902e00afa278" name="opencryptoki-icsftok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="176b44f5624a5d3749703ff0ab49f60b38448ad5a7365f4c7067bd36c4376fcb" name="opencryptoki-icsftok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="8ecc30970bcdd6303f6a326c3535f2f0e4aaefc4450804ba0aa649a72496aef8" name="opencryptoki-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="1b786e44815eacbbf6b1bcdb6bfa6dd2185ca8e87e1b8554635a5533f4bd5354" name="opencryptoki-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="0b0953bcd4af2a09fe66111a4e6b0f25d83d3087385c2ad849d95d5717e9bd59" name="opencryptoki-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="a82dd7a9149262ff99bd75590d1caeb97c087e38c76a345899ac9130b77817fa" name="opencryptoki-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="c7b1a08cb8f454b95fd25b6df8bca4a3fcf74e132427261a8844e88be9c89d76" name="opencryptoki-swtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-3" date="1732622400">- Disable ccatok on aarch64
  Related: RHEL-50064</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
</package>
<package pkgid="af804a48634a8ff8831cfbfa04cd7af6e83301602e5a41a60f32332bd17a9937" name="opencryptoki-swtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="0d73a277b11f78f1002dd784e4c844418016807405a6f11164263858d6aef513" name="openldap-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="a74387073fdd598a876600fd8b7f4d80a342b254690245d6f857bed36f66f500" name="openldap-compat-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="91d5b4e9bc07512135d65efa09d3c7dc8d9ebc11390f54657ab66f19cf4f608b" name="openldap-compat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="50ded495320085b684230d2b604f9d5868e8fc60bcf056e4048ca6838b7da264" name="openldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="fa5443390f044445fb3cddd314e5df8d579ae7fa9d24bfd2485fe812baa368c8" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="a0ca988a6d41367181da6ecefeaeaf4035e498029105f62c82fafc4e8a513cf4" name="openldap-debugsource" arch="i686">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="60c3c07930caec88ebce248686ba22f9c909a2909a3d044859340da0bc49820e" name="openldap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.8" rel="4.el9.0.1"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.3-1" date="1686744000">- Rebase OpenLDAP to 2.6.3
  Related: rhbz#2212983</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-1" date="1697025600">- Rebase OpenLDAP in RHEL 9.4
  Resolves: RHEL-11306</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-2" date="1702555200">- The client tools parameters '-h' and '-p' are still deprecated,
  but this release brings back the client tools options that
  were removed during the previous rebase.
  Resolves: RHEL-19384</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-3" date="1707480000">- Use systemd-sysusers for ldap user and group
  Replace License with SPDX identifier
  Resolves: RHEL-5140</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.6-4" date="1728648000">- Disable MD2 hash algorithm
  Resolves: RHEL-59715</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-1" date="1734350400">- Rebase to version 2.6.8 (RHEL-71053)
- Avoid SSL context cleanup during library destruction (RHEL-56502)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-2" date="1736251200">- Replace baseos-ci tests with osci (RHEL-71053)</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.6.8-3" date="1736337600">- Migrate gating tests from STI to FMF (RHEL-71053)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.6.8-4" date="1739361600">- Fix TLS connection timeout handling (RHEL-78297)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 2.6.8-4.0.1" date="1746792000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="24a0168f48ce28b26f39b0cc75be31e24630063cda033f4dcc7ec673b2509d4a" name="opensc-debuginfo" arch="i686">
  <version epoch="0" ver="0.23.0" rel="6.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.23.0-3" date="1701345600">- Fix file caching with different offsets (RHEL-4079)
- Fix CVE-2023-40660: Potential PIN bypass
- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
- Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-4" date="1707393600">- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-5" date="1729771200">- Add URI in PKCS#11 objects and pkcs11-tool (RHEL-53115)</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-6" date="1753099200">- Fix free before dereference when reading public key (RHEL-96029)</changelog>
</package>
<package pkgid="9e8a4703d1ecb2f9861730f000098da69dd56261bd52850ce2c90dfa6ab9edc6" name="opensc-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.23.0" rel="6.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.23.0-3" date="1701345600">- Fix file caching with different offsets (RHEL-4079)
- Fix CVE-2023-40660: Potential PIN bypass
- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
- Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-4" date="1707393600">- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-5" date="1729771200">- Add URI in PKCS#11 objects and pkcs11-tool (RHEL-53115)</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-6" date="1753099200">- Fix free before dereference when reading public key (RHEL-96029)</changelog>
</package>
<package pkgid="e3fc55f249aea897a6171f4f30b9edd88b71ca78b82b968cb3dd980e2d0cee66" name="opensc-debugsource" arch="i686">
  <version epoch="0" ver="0.23.0" rel="6.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.23.0-3" date="1701345600">- Fix file caching with different offsets (RHEL-4079)
- Fix CVE-2023-40660: Potential PIN bypass
- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
- Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-4" date="1707393600">- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-5" date="1729771200">- Add URI in PKCS#11 objects and pkcs11-tool (RHEL-53115)</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-6" date="1753099200">- Fix free before dereference when reading public key (RHEL-96029)</changelog>
</package>
<package pkgid="e4172ce166529d42ebab74aa0c87ee7e60c29abbaf3a2e0e8880e915e83e77eb" name="opensc-debugsource" arch="x86_64">
  <version epoch="0" ver="0.23.0" rel="6.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.23.0-3" date="1701345600">- Fix file caching with different offsets (RHEL-4079)
- Fix CVE-2023-40660: Potential PIN bypass
- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
- Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-4" date="1707393600">- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-5" date="1729771200">- Add URI in PKCS#11 objects and pkcs11-tool (RHEL-53115)</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 0.23.0-6" date="1753099200">- Fix free before dereference when reading public key (RHEL-96029)</changelog>
</package>
<package pkgid="0a59fd6d1d41f718ad3d8abcda535d77d0b2f097a218ba8033d0978aa0cf762c" name="opensm-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8399f53ea5b0cde903bdbe5f1aec6d4fa9430c1463b597fe724737199efabeed" name="opensm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1a4ed0e805079c4a7cd0b59094fe13db464eb980bccb2e9a9f0bcb2906627d53" name="opensm-debugsource" arch="i686">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ea584e4fce73f202732cde12b7c3ea292388eace15dcf38aa17470a8fa6c8b33" name="opensm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6fb323d8d15a262630256f65ffe32f152bf7b21cac5343234459818db8051f77" name="opensm-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="02853a2b430d4ce6c38c4113cd41acca037c15f4e3e6e3c9e3ac2f9f7a42386a" name="opensm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5b8bc07354a264847e961110372002ed1a1d605e8889670f124283fc49a339de" name="openssh-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8.rocky.0.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.7p1-45" date="1739880000">- Fix missing error codes set and invalid error code checks in OpenSSH. It
  prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
  is on (CVE-2025-26465).
  Resolves: RHEL-78700</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
</package>
<package pkgid="4e734e3e0160aa11d909c86b6787822986fa83cd6e3339e30bbdbb0c4f8ccaca" name="openssh-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="9.el9_8.rocky.0.1"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-8" date="1782820800">- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-9" date="1784030400">- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-9.rocky.0.1" date="1785412800">- Remove Red Hat message</changelog>
</package>
<package pkgid="06c6bfd3708ff8693587f2938d72549d55fd322fd8f46b64b7c6f89b1cfd2e48" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8.rocky.0.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.7p1-45" date="1739880000">- Fix missing error codes set and invalid error code checks in OpenSSH. It
  prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
  is on (CVE-2025-26465).
  Resolves: RHEL-78700</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
</package>
<package pkgid="f844bf1e3b20d4643a93da2d4f8e93342d1c6f8b71361c2ec4ef45943bf2f201" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="9.el9_8.rocky.0.1"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-8" date="1782820800">- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-9" date="1784030400">- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-9.rocky.0.1" date="1785412800">- Remove Red Hat message</changelog>
</package>
<package pkgid="d15bd96328cfa047613b5d9890e70ce43edc4132e78a3d545cb98bcf138e1c78" name="openssh-debugsource" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8.rocky.0.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.7p1-45" date="1739880000">- Fix missing error codes set and invalid error code checks in OpenSSH. It
  prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
  is on (CVE-2025-26465).
  Resolves: RHEL-78700</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
</package>
<package pkgid="bbd1df3978829931bda5c531689efc08de5ed4dd1b14008706e20acda3782ef4" name="openssh-debugsource" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="9.el9_8.rocky.0.1"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-8" date="1782820800">- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-9" date="1784030400">- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-9.rocky.0.1" date="1785412800">- Remove Red Hat message</changelog>
</package>
<package pkgid="39b83ab05683d34e898ab8e6f8d6c0303643723af19473957ebedfa47b6a68f6" name="openssh-keycat-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8.rocky.0.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.7p1-45" date="1739880000">- Fix missing error codes set and invalid error code checks in OpenSSH. It
  prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
  is on (CVE-2025-26465).
  Resolves: RHEL-78700</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
</package>
<package pkgid="bdf997eb2ac26af2452fab47e5723b0aa51c42d40df02b10ea179ff53a02dbf1" name="openssh-keycat-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="9.el9_8.rocky.0.1"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-8" date="1782820800">- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-9" date="1784030400">- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-9.rocky.0.1" date="1785412800">- Remove Red Hat message</changelog>
</package>
<package pkgid="16ec9030614d10f6ee7dc87f03a06d79f328d867002f7bd4f9488ff6e6a39f0e" name="openssh-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8.rocky.0.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.7p1-45" date="1739880000">- Fix missing error codes set and invalid error code checks in OpenSSH. It
  prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
  is on (CVE-2025-26465).
  Resolves: RHEL-78700</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
</package>
<package pkgid="f604b495745a373acdbacb96e42e51b52159410ad6e63a8886cdc77dbf7b5430" name="openssh-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="9.el9_8.rocky.0.1"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-8" date="1782820800">- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-9" date="1784030400">- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-9.rocky.0.1" date="1785412800">- Remove Red Hat message</changelog>
</package>
<package pkgid="23785a3ad2854b2b6bdcffce23ee8d6b17200553bf1aa3cbe05619fac659e1e7" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="4c64c55b987fd5062c6c60c6db923dd919e92b9e6188b40572b417477f8c229d" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="b5e4d0788731698942d69a14299d25a2c63e1ee75076d83b75386a7661b56bee" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="344927ce1d77dcf8dd4755bea80f532345b6e76a9b0d9e0aa4895e5b9c4abb8a" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="7f26adbbe54c6488b923383105712dc216b1d3f5410713b6af74c64a822a2de4" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="d2bbfd7d34cfe31ced3b483c62238922aa9921258e276070b567b16109695a22" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="7f170c026ecc1d6164bd75289ab63346effb71583d816b34c4f1d24186518014" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="6d44ad081636523cac339f96b6e80804d8b48b25ebbd5f3e41e86666a926c61a" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="dbae904d301aae12d87a4248890afc4bf12264c6cf1e9c1e6fa67ee421fe9a49" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="844fba223824c6005af2e38cfa0e940b9610628efa7f94b77c48e77a447965d8" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="0ecc50e5942986dc884a98fc57e6cabaaa7b00aa77b4753932f32514842500c6" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="2f70554ca7470da8ca7b97cc4ac76954d952126e5232336e285535d576607048" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="c9e968937970aa9bab35d67497a1120b63be65bfb097abdc000b2b4e8be91afc" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="54cab33e0b5d87b6f364a0ead09f8d2a74c2014ec237244a7cf220fe344fad01" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="713d0bf10a7bc9de7917e23df2d51c09e61988627ad62e5a0d7f5baae35226b9" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="6ade9f1dc0526d83c47fb32bd2d66ae7ac183ca5e5456fc60db92989481f7815" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="a2db2c002ea33c96797436e9002832c2f57d7ed8120b1cf4e431a6a7006ae3f3" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="176aac1283eba1b55fc85a7ce946cf11c80a3006cdac41eadfb7261c5b041205" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="644ec2f32c22858af70c505bfdc78a391849127cf6172ad5a9b1e3b58f57b7f4" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="352fb8949ca4a2363011bc10ecaf9d0eaa3f105c3cd7094c2b41b8a0afa86406" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="0f7ea2d71167858f9907cc87aa831458b034a28244934acc8132ad08ba8aa91d" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="0031901139e4c66f41c2b12b242581692ced4e29b49a43929a803930f930b87c" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="4f477c7cf66093306e8e65b9e3f400bffee7123903ee34162f1b04a45b777a84" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="8e77a5ee8ea7cca05aeac4a2b3de4b6b801e8151fc87e5a7cf2aa47283d2136e" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="e33acf9b9d017e28f1a356d882875a3a41e27231c8a9d85b95281210889a1e6e" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="f7291d0f4e3fc7eb65b1ff8705d10ef33fab036924c16eb070bb0bc3d32607f7" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="aea0cef7a239f63db4944fe26509075ab8fe9bf4b26ce6f61f4896e3381ea24c" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="cd0f3635d8796105b5ddffd093eefd990f3fba7031d715c0e04fe7bfa022116d" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="baf5cf01c5a1c726ccc20dd600633429ce40eeb4f07879e3f04a864b781ba079" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="ee17f87dae65b4c0bae0f20d69b054a4ebbc09d425a5a44a08ab8a18e010ae15" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="5e2671b4cbb6eede4b1d7aa090c97416d193ac059b7b6411895b915380255424" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="d8b25bdb4cf7a7149d19022d8d04f2b28df8364bb46a18e8f50fcac79a701582" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="2.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-3" date="1747915200">- Fix regressions caused by rebase to OpenSSL 3.5
  Related: RHEL-80854</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
</package>
<package pkgid="ff4e516167bbb7191f358eca5f5c7d52eac1239640ec9a68786c75873c41055c" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="ea53e1f769411e3bca160e10259e2f3b757b6c1ed5628bc5fd3df21c82decc0a" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="3.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.0-4" date="1748865600">- Compact patches for better maintainability
  Related: RHEL-80854
- Make hybrid MLKEM work with our FIPS provider (3.0.7)
  Resolves: RHEL-95239</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
</package>
<package pkgid="f404fe057021953669837d6ec220b0e8e94cac51fa6f33d48a87a3d9e5ce3f51" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="b3b172ffcf8549b05d3f90acb26c2d597f42ac5d24c09af86bbf92629ca49497" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="4.el9_8"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.1-1" date="1751371200">- Rebasing to OpenSSL 3.5.1
  Resolves: RHEL-97797
  Resolves: RHEL-98723
  Resolves: RHEL-99352</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
</package>
<package pkgid="14952c24402319c518f1d407d67b476ab92bde65a4cecb5c1c5fc7dae0106cfa" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="43e0aa9b84a77e2be2ce87e54516afd38fc0dd2b7e97a6c1e133facb339dac6b" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="544a9a42c69906aee395451f95e8fba2300aac02aa6b716825be2f071ae0dabc" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="1ffb94c83a15dc24d22901c5883956bbf6a2e746a26a013778cad5fe36b32f3b" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="1e8e9ea71085e11236e9c7e8d1d74225f5aac78ea7628b5bb0720d19c70ff1c1" name="openssl-pkcs11-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.11" rel="9.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-8" date="1692964800">- Fix sending parameters for RSA-OAEP operations (#2063378)
- Improve logging and fix selection of expired certificates (#2029834)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-9" date="1694174400">- Fix coverity issues introduced with recent changes</changelog>
</package>
<package pkgid="28ba12f60c0f78ed58d455aaced2cdb1755be772d328bd593d32f99ba815d4b9" name="openssl-pkcs11-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.11" rel="9.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-8" date="1692964800">- Fix sending parameters for RSA-OAEP operations (#2063378)
- Improve logging and fix selection of expired certificates (#2029834)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-9" date="1694174400">- Fix coverity issues introduced with recent changes</changelog>
</package>
<package pkgid="d570a73b5901a28ce1358edc7bc6803286118080dabc8f34fd8fd8900e85f022" name="openssl-pkcs11-debugsource" arch="i686">
  <version epoch="0" ver="0.4.11" rel="9.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-8" date="1692964800">- Fix sending parameters for RSA-OAEP operations (#2063378)
- Improve logging and fix selection of expired certificates (#2029834)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-9" date="1694174400">- Fix coverity issues introduced with recent changes</changelog>
</package>
<package pkgid="e93bef953ad9a4719cbb543ef997805b3bc47301999a3183277d8dc34dd4fdad" name="openssl-pkcs11-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.11" rel="9.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-8" date="1692964800">- Fix sending parameters for RSA-OAEP operations (#2063378)
- Improve logging and fix selection of expired certificates (#2029834)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.4.11-9" date="1694174400">- Fix coverity issues introduced with recent changes</changelog>
</package>
<package pkgid="03794eafc51bd24c64fa89d2a11c45510d7edc32fe0935acfe56684886dc26cf" name="os-prober-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.77" rel="12.el9_5"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.77-10" date="1677499200">- Fix inheritance of environment build flags
- Resolves: #2144572</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 1.77-11" date="1724068800">- 90fallback: include possible kernel parameters from grub's default file
- common.sh: do not resolve symbolic link on mapped device filesystems
- Resolves: #RHEL-44705</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 1.77.12" date="1725883200">- 50mounted-tests: trap do_unmount function on errors
- Resolves: RHEL-41244</changelog>
</package>
<package pkgid="af67e945196defd097d97e31ddabbf18e1fa4cc9c9654d1b54b67494e285c831" name="os-prober-debugsource" arch="x86_64">
  <version epoch="0" ver="1.77" rel="12.el9_5"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.77-10" date="1677499200">- Fix inheritance of environment build flags
- Resolves: #2144572</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 1.77-11" date="1724068800">- 90fallback: include possible kernel parameters from grub's default file
- common.sh: do not resolve symbolic link on mapped device filesystems
- Resolves: #RHEL-44705</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 1.77.12" date="1725883200">- 50mounted-tests: trap do_unmount function on errors
- Resolves: RHEL-41244</changelog>
</package>
<package pkgid="9047f1d63909eb577346cb771362a40b5cbd9c998ec095b346e7a0526f60545c" name="p11-kit-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="ae2ffae74bebe663b1c1eae1e885efffb617cd659f00caee9cb2f8a7f7685ff1" name="p11-kit-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="5c92af7ec9908cd97d64b13ffca0eb6e384b09a55a9ac238a474a08775d20cb5" name="p11-kit-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="bbf877a7eb216e6a009311d78d59de07018b52112e3bd3edf9f7f308843aec6d" name="p11-kit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="6b10251e183362d9d6e66f92a9c827cd64cbf2b5e07e703d2cf607eee00a2bc9" name="p11-kit-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="6fbb2cb3bcc6239c6271b7deb6ee8f5450d3d317166389161733d985df111c30" name="p11-kit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="f8eac6bd23c7991e18c880e9219d07c29d0b9bf39a537b9062f3b359fa1d8b1e" name="p11-kit-debugsource" arch="i686">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="9fbaf27552805e64f4c10e0225006707a7ca37614612c1d17e6866d0edba7d1c" name="p11-kit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="a1f7b29b588d848abe918dbf81f63ee006aba24a2865a9fd89082dfe17e720aa" name="p11-kit-debugsource" arch="i686">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="bb9b254c1326dbf9b6257434bed411a38e960514ce5ccf20c16ebe74a8b4155a" name="p11-kit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="e52dba93ba4ee4a664d3c0ba44863e8a39c10c07998b2b9dfe78db53b6a5b379" name="p11-kit-trust-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="0381f79fc86300a178b58d249dc94e15a8744dabe19fa403b716f65bf1acfa69" name="p11-kit-trust-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="4338e1dc1e235d3059e063f8e44d03208934de995cec798be199268165e65ab7" name="p11-kit-trust-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="e29930860bb541dad72efcb11269c266e8077090ea0f7e1f860cc9c0479a4080" name="p11-kit-trust-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="3666792aaea81553cda1ccc1ad3683dbe42bdaeccdc475994d0dba49178bded6" name="pam-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.1" rel="28.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1730721600">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62879
- pam_access: always match local address and clarify LOCAL keyword behaviour.
  Resolves: RHEL-23631 and RHEL-39943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-23" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-27" date="1754395200">- pam_unix: sync expiry checks with shadow.
  Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
- pam.conf: remove tallylog. Resolves: RHEL-15324
- pam_namespace: fix potential privilege escalation.
  Resolves: CVE-2025-6020 and RHEL-96727</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-28" date="1765368000">- pam_faillock: skip clearing user's failed attempt.
  Resolves: RHEL-130875</changelog>
</package>
<package pkgid="ceade132ab08f82862ccc6a4de587a22afce2d14a0725cef95f7d136780eeb06" name="pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="28.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1730721600">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62879
- pam_access: always match local address and clarify LOCAL keyword behaviour.
  Resolves: RHEL-23631 and RHEL-39943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-23" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-27" date="1754395200">- pam_unix: sync expiry checks with shadow.
  Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
- pam.conf: remove tallylog. Resolves: RHEL-15324
- pam_namespace: fix potential privilege escalation.
  Resolves: CVE-2025-6020 and RHEL-96727</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-28" date="1765368000">- pam_faillock: skip clearing user's failed attempt.
  Resolves: RHEL-130875</changelog>
</package>
<package pkgid="02b3e61342c415292a72965847bd5511126367a3584f93c643e3e67515be577d" name="pam-debugsource" arch="i686">
  <version epoch="0" ver="1.5.1" rel="28.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1730721600">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62879
- pam_access: always match local address and clarify LOCAL keyword behaviour.
  Resolves: RHEL-23631 and RHEL-39943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-23" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-27" date="1754395200">- pam_unix: sync expiry checks with shadow.
  Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
- pam.conf: remove tallylog. Resolves: RHEL-15324
- pam_namespace: fix potential privilege escalation.
  Resolves: CVE-2025-6020 and RHEL-96727</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-28" date="1765368000">- pam_faillock: skip clearing user's failed attempt.
  Resolves: RHEL-130875</changelog>
</package>
<package pkgid="e13577876dab53a7bfa590c4102b81eb1587d043d9426690c2ac861a675d6eb0" name="pam-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="28.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1730721600">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62879
- pam_access: always match local address and clarify LOCAL keyword behaviour.
  Resolves: RHEL-23631 and RHEL-39943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-23" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-27" date="1754395200">- pam_unix: sync expiry checks with shadow.
  Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
- pam.conf: remove tallylog. Resolves: RHEL-15324
- pam_namespace: fix potential privilege escalation.
  Resolves: CVE-2025-6020 and RHEL-96727</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-28" date="1765368000">- pam_faillock: skip clearing user's failed attempt.
  Resolves: RHEL-130875</changelog>
</package>
<package pkgid="3d965af63a07ff2f629a36d78c68f62a2b464fcd13a2371ee2fb8dcfb5fe592b" name="parted-debuginfo" arch="i686">
  <version epoch="0" ver="3.5" rel="3.el9"/>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 3.5-3" date="1737460800">- tests: Add test for dvh with a bad checksum (bcl)
  Related: RHEL-73217
- libparted: Fix dvh disklabel unhandled exception (bcl)
  Related: RHEL-73217
- tests: Add test for SUN disklabel handling (bcl)
  Related: RHEL-73217
- libparted: Fix sun disklabel unhandled exception (bcl)
  Resolves: RHEL-73217</changelog>
</package>
<package pkgid="8cc39f5df424a47603660901f5c6157f7d4c3153785f64e8c81ef96d6f589193" name="parted-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5" rel="3.el9"/>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 3.5-3" date="1737460800">- tests: Add test for dvh with a bad checksum (bcl)
  Related: RHEL-73217
- libparted: Fix dvh disklabel unhandled exception (bcl)
  Related: RHEL-73217
- tests: Add test for SUN disklabel handling (bcl)
  Related: RHEL-73217
- libparted: Fix sun disklabel unhandled exception (bcl)
  Resolves: RHEL-73217</changelog>
</package>
<package pkgid="d0831ba4aa8bffce8bed5300b9f67024125f23ec6dabf80b0b65f993340bb01e" name="parted-debugsource" arch="i686">
  <version epoch="0" ver="3.5" rel="3.el9"/>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 3.5-3" date="1737460800">- tests: Add test for dvh with a bad checksum (bcl)
  Related: RHEL-73217
- libparted: Fix dvh disklabel unhandled exception (bcl)
  Related: RHEL-73217
- tests: Add test for SUN disklabel handling (bcl)
  Related: RHEL-73217
- libparted: Fix sun disklabel unhandled exception (bcl)
  Resolves: RHEL-73217</changelog>
</package>
<package pkgid="d295f4beb00173f020ded645abd1cef94cde66056a7f9dc9f192ccdf2ef42c4b" name="parted-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5" rel="3.el9"/>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 3.5-3" date="1737460800">- tests: Add test for dvh with a bad checksum (bcl)
  Related: RHEL-73217
- libparted: Fix dvh disklabel unhandled exception (bcl)
  Related: RHEL-73217
- tests: Add test for SUN disklabel handling (bcl)
  Related: RHEL-73217
- libparted: Fix sun disklabel unhandled exception (bcl)
  Resolves: RHEL-73217</changelog>
</package>
<package pkgid="46ca78cfc7f2beaf93a8701d56f554c307d38ff9726c5a23f38f17e7ed05cc9d" name="passwd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.80" rel="12.el9"/>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 0.80-7" date="1575460800">- fix inconsistencies in manpage
- fix incorrect -S output
  Resolves: #1612221, #1740166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.80-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.80-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.80-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.80-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.80-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f6ce7452407c46aa5cfee661351346c794b4360455c11fe1fd048a89e6047fd8" name="passwd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.80" rel="12.el9"/>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 0.80-7" date="1575460800">- fix inconsistencies in manpage
- fix incorrect -S output
  Resolves: #1612221, #1740166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.80-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.80-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.80-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.80-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.80-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7bb4df83dab25ab0fd4e873a6b513037c71d1333239d9316cc09e7d9ff8dca4f" name="pciutils-debuginfo" arch="i686">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="a29abbc9eb4e6919d1cfe2c1325cae97c1b6f180f2d0c5b9d5494dc81abc07ca" name="pciutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="bb960baac7ddb91cfdd85516649855ceaf3a44716b5d0acf9fdb6affb7234539" name="pciutils-debugsource" arch="i686">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="a2689fb6edc29893c7d3f47b96e33845a76ee5b86189a2779df61a8cf6829386" name="pciutils-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="7c5c3acb6aabad467d23f4dee766f90442a6e48926a24748252ffa6d8bc982d4" name="pciutils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="eb149d29b636d9e68dbd6a0d5f330f6cadefc1b6350cc2daf9bb630f00f0ebee" name="pciutils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="f48ab3e5b5250fe5f1dca174090287743aa1103cdd22030f5b760d717d8440bf" name="pcre-debuginfo" arch="i686">
  <version epoch="0" ver="8.44" rel="4.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.44.3-4" date="1713355200">- Fix the SAST reports described in RHEL-32492 and RHEL-32488</changelog>
</package>
<package pkgid="11f404c05181c228577c71208736705e0bf5c0ebbdda236d88ce9700028d96e0" name="pcre-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.44" rel="4.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.44.3-4" date="1713355200">- Fix the SAST reports described in RHEL-32492 and RHEL-32488</changelog>
</package>
<package pkgid="3842c4adcf29ad0d077eaa222de0e781e8345b4bb45326de2c96244daf4e164b" name="pcre-debugsource" arch="i686">
  <version epoch="0" ver="8.44" rel="4.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.44.3-4" date="1713355200">- Fix the SAST reports described in RHEL-32492 and RHEL-32488</changelog>
</package>
<package pkgid="e6c1696e3d94152979d1ac7162c72e48975c34d30deb8c0455742715d4cdf03b" name="pcre-debugsource" arch="x86_64">
  <version epoch="0" ver="8.44" rel="4.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.44.3-4" date="1713355200">- Fix the SAST reports described in RHEL-32492 and RHEL-32488</changelog>
</package>
<package pkgid="6c7b93b4af52673b62e7f3e9a4d66f4e769eaf3ad7b5acbeca81d555f2a6eec8" name="pcre2-debuginfo" arch="i686">
  <version epoch="0" ver="10.40" rel="6.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-3" date="1697544000">- Fix issue in the backtracking optimization of character in JIT</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-4" date="1699876800">- Fix an issue with restoring originally unset entries in recursion
- Resolves: BZ#2248133</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-5" date="1708084800">- Rebuilt for added pcre2-tools into CRB</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-6" date="1722427200">- Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64
- Resolves: RHEL-51866</changelog>
</package>
<package pkgid="4a0200d820ceb5bb963db64f1df0606236731cb2a7175e980c4ba966031853a2" name="pcre2-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.40" rel="6.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-3" date="1697544000">- Fix issue in the backtracking optimization of character in JIT</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-4" date="1699876800">- Fix an issue with restoring originally unset entries in recursion
- Resolves: BZ#2248133</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-5" date="1708084800">- Rebuilt for added pcre2-tools into CRB</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-6" date="1722427200">- Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64
- Resolves: RHEL-51866</changelog>
</package>
<package pkgid="3c559e452ef7271742aee9887f67b9321ea700aa4e28addbee08132907131c9f" name="pcre2-debugsource" arch="i686">
  <version epoch="0" ver="10.40" rel="6.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-3" date="1697544000">- Fix issue in the backtracking optimization of character in JIT</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-4" date="1699876800">- Fix an issue with restoring originally unset entries in recursion
- Resolves: BZ#2248133</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-5" date="1708084800">- Rebuilt for added pcre2-tools into CRB</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-6" date="1722427200">- Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64
- Resolves: RHEL-51866</changelog>
</package>
<package pkgid="0168f9e28cf1c6a7e717137efde2f7a6421f259441eb68e7ea716ebde0031ae4" name="pcre2-debugsource" arch="x86_64">
  <version epoch="0" ver="10.40" rel="6.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-3" date="1697544000">- Fix issue in the backtracking optimization of character in JIT</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-4" date="1699876800">- Fix an issue with restoring originally unset entries in recursion
- Resolves: BZ#2248133</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-5" date="1708084800">- Rebuilt for added pcre2-tools into CRB</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-6" date="1722427200">- Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64
- Resolves: RHEL-51866</changelog>
</package>
<package pkgid="f46ee320624d558026b3fb48e8b0c6d7d5ae20bb34eeeb2a3d16a49a178eb19c" name="pcsc-lite-ccid-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="1.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.4.34-4" date="1624622400">- Increase the maximum readers count (#1975424)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.34-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.4.36-1" date="1637236800">- Rebase to current version from Fedora (#2017830)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.2-1" date="1686225600">- Rebase to current version from Fedora to fix support for Alcor Micro Corp. AU9540 (#2209457)</changelog>
</package>
<package pkgid="63e4f42bad5bcd2b5c63bdc1c77d3d980cc1796cc872a1a6cf13632b9d5e7e09" name="pcsc-lite-ccid-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="1.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.4.34-4" date="1624622400">- Increase the maximum readers count (#1975424)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.34-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.4.36-1" date="1637236800">- Rebase to current version from Fedora (#2017830)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.5.2-1" date="1686225600">- Rebase to current version from Fedora to fix support for Alcor Micro Corp. AU9540 (#2209457)</changelog>
</package>
<package pkgid="a34b904b09e4d40b6f7e5b74af36866d41192edb9245b51de8d9bf685d904d68" name="pcsc-lite-debuginfo" arch="i686">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="f65f426211796329db9a3c4a3bf3d3089c0e399f53bf031de0388758c69b1fd4" name="pcsc-lite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="4c8251be231e76d2380002bd7bef630561cb0b6b490d81f64852baea3f1c2d5c" name="pcsc-lite-debugsource" arch="i686">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="68049e9422f72602d583e1280ba7e6d9d2c21c9f94ab930f04ad442f222d7609" name="pcsc-lite-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="fdecedf7779974f6dbb6335bc4aad24b1dfb714f2c137175fd2a614f03c07953" name="pcsc-lite-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="cf1c584375e2a191ca046303a25e3e73d45a2a1c434ce9c708d4c24dab4aa510" name="pcsc-lite-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="fefc35a6f545cb1af3d75add74cff2168727c6cbe530b8f6efb0553ba67b2f26" name="perftest-debuginfo" arch="x86_64">
  <version epoch="0" ver="25.10.0.0.128" rel="3.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 24.07.0.0.44-1" date="1730894400">- Update to upstream release 24.07.0.0.44
- Resolves: RHEL-66185</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.04.0.0.84-1" date="1751544000">- Update to upstream release 25.04.0.0.84
- Resolves: RHEL-99801</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-1" date="1765368000">- Update to upstream release 25.10.0.0.128
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-2" date="1769169600">- Rebuilt for RHEL-9.8
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-3" date="1769601600">- Fix RDMA CM DMAH bug
- Resolves: RHEL-134210</changelog>
</package>
<package pkgid="a48492a66cb8221110e4af55052c6242dc2e452f10cab1057832a3bf2b37c892" name="perftest-debugsource" arch="x86_64">
  <version epoch="0" ver="25.10.0.0.128" rel="3.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 24.07.0.0.44-1" date="1730894400">- Update to upstream release 24.07.0.0.44
- Resolves: RHEL-66185</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.04.0.0.84-1" date="1751544000">- Update to upstream release 25.04.0.0.84
- Resolves: RHEL-99801</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-1" date="1765368000">- Update to upstream release 25.10.0.0.128
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-2" date="1769169600">- Rebuilt for RHEL-9.8
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-3" date="1769601600">- Fix RDMA CM DMAH bug
- Resolves: RHEL-134210</changelog>
</package>
<package pkgid="7d129594da33903cafc3ab437efc182de127477cfb9a0ce026847a4052af9509" name="pigz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8" rel="1.el9"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 2.8-1" date="1733486400">- Update to upstream v2.8
- Resolves: RHEL-70287</changelog>
</package>
<package pkgid="8ff772586a6510b2ffb209ed5c8c7ba5d2369623bebbb6740615ebe9c190d8d5" name="pigz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8" rel="1.el9"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 2.8-1" date="1733486400">- Update to upstream v2.8
- Resolves: RHEL-70287</changelog>
</package>
<package pkgid="3c7480baa0a8218c562d4c69ecd2b36f907357ccb984b4a8340e6c4a1795493f" name="pkcs11-provider-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0" rel="3.el9"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.0-1" date="1754049600">- Initial commit on c9s</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.0-2" date="1754049601">- Enable gating</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.0-3" date="1754308800">- Skipping softhsm tests for tls</changelog>
</package>
<package pkgid="5bcde8080254b8da6d2dc21315b24ee3b92f27a233c84c504f4c16b5bf959b94" name="pkcs11-provider-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0" rel="3.el9"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.0-1" date="1754049600">- Initial commit on c9s</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.0-2" date="1754049601">- Enable gating</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.0-3" date="1754308800">- Skipping softhsm tests for tls</changelog>
</package>
<package pkgid="3569a2a12d8f9c361ef2dc69ecc79103e2ed83275dd8f48c37b370f619e342f9" name="pkgconf-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="9cf456996fc80795284107d99bd1c3962e46d7621cdb0e2bbeed12d6e6145c02" name="pkgconf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="cc089474de845cc041f18be87b6f1975dbf7a815d63f760b2883004dde83cb3d" name="pkgconf-debugsource" arch="i686">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="0f77b4863f098075de8164b8356281fc6424291617167fd07635ba4e8861b735" name="pkgconf-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="d8bb948c3f20f495e877a66765ff23fe074d8ff75a451770d44c4828ecea4f2b" name="policycoreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="e41898828ad931c1b1f1f37d0a30eef5ebd03f0554eeb2345e2c22036c05522e" name="policycoreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="8e9b74406fcc02cbf889f07a70134725b034db530257f75a63087a2072f17309" name="policycoreutils-newrole-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="7fb8ea75397bf9b5077a66e72d6d59b350214ca32436c2e1d92807840d15abc6" name="policycoreutils-restorecond-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="2f182c903c5fbcea866ed7097c14a1c2a31e092488edb00c8ab1aa4d946a3b4c" name="polkit-debuginfo" arch="i686">
  <version epoch="0" ver="0.117" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-12" date="1710763200">- pkttyagent: EOF in passwd results in coredump
- Resolves: RHEL-5772</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-13" date="1716897600">- session-monitor: watch sessions only
- PolkitPermission: react on really changed sessions
- allow polkit-pkla-compat to be uninstalled if no .pkla rules
- Resolves: RHEL-39063</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-14" date="1754395200">- aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel
- Resolves: RHEL-98662</changelog>
</package>
<package pkgid="812917e1c78981863744c3aea784430d925056aa8f2e17717a0987a61cb33edd" name="polkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.117" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-12" date="1710763200">- pkttyagent: EOF in passwd results in coredump
- Resolves: RHEL-5772</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-13" date="1716897600">- session-monitor: watch sessions only
- PolkitPermission: react on really changed sessions
- allow polkit-pkla-compat to be uninstalled if no .pkla rules
- Resolves: RHEL-39063</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-14" date="1754395200">- aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel
- Resolves: RHEL-98662</changelog>
</package>
<package pkgid="1afe5520e21a4d102cef840440f00044e3ae20d6da1dc3eec66f5d7490c7a456" name="polkit-debugsource" arch="i686">
  <version epoch="0" ver="0.117" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-12" date="1710763200">- pkttyagent: EOF in passwd results in coredump
- Resolves: RHEL-5772</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-13" date="1716897600">- session-monitor: watch sessions only
- PolkitPermission: react on really changed sessions
- allow polkit-pkla-compat to be uninstalled if no .pkla rules
- Resolves: RHEL-39063</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-14" date="1754395200">- aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel
- Resolves: RHEL-98662</changelog>
</package>
<package pkgid="aec993c783529e89e04fea66413de2935b3867cf9ebd13409b572f4f3e61d129" name="polkit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.117" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-12" date="1710763200">- pkttyagent: EOF in passwd results in coredump
- Resolves: RHEL-5772</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-13" date="1716897600">- session-monitor: watch sessions only
- PolkitPermission: react on really changed sessions
- allow polkit-pkla-compat to be uninstalled if no .pkla rules
- Resolves: RHEL-39063</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-14" date="1754395200">- aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel
- Resolves: RHEL-98662</changelog>
</package>
<package pkgid="f330481267172e671d61ecb42ecea977b2b5c5cc0d7807513206af69f2c2c080" name="polkit-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.117" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-12" date="1710763200">- pkttyagent: EOF in passwd results in coredump
- Resolves: RHEL-5772</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-13" date="1716897600">- session-monitor: watch sessions only
- PolkitPermission: react on really changed sessions
- allow polkit-pkla-compat to be uninstalled if no .pkla rules
- Resolves: RHEL-39063</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-14" date="1754395200">- aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel
- Resolves: RHEL-98662</changelog>
</package>
<package pkgid="c0c4da9ad4e0f9983e9d6f1c5dddfcd41024a0f755c784ee717e01b118b940dc" name="polkit-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.117" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-12" date="1710763200">- pkttyagent: EOF in passwd results in coredump
- Resolves: RHEL-5772</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-13" date="1716897600">- session-monitor: watch sessions only
- PolkitPermission: react on really changed sessions
- allow polkit-pkla-compat to be uninstalled if no .pkla rules
- Resolves: RHEL-39063</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.117-14" date="1754395200">- aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel
- Resolves: RHEL-98662</changelog>
</package>
<package pkgid="0d0934f9f5e2444aa518f50a914b98ebb1b0457be6e50c8552437fe120001b52" name="polkit-pkla-compat-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1" rel="21.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-16" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-17" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-18" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-19" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1-20" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1-21" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3d064489df5600fcbb043ebdedb1144567c058f022018fc343ab7e791ed0d5b9" name="polkit-pkla-compat-debugsource" arch="x86_64">
  <version epoch="0" ver="0.1" rel="21.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-16" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-17" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-18" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-19" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1-20" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1-21" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2be6d0ad0923eb8e3fbae4e279b7ae3a0fa57c34609a3a5a54cad5c0acc4217d" name="popt-debuginfo" arch="i686">
  <version epoch="0" ver="1.18" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-19" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18~rc1-1" date="1590753600">- Rebase to popt 1.18-rc1
- Update URLs to the new upstream</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18-1" date="1593000000">- Update to popt 1.18 final (no changes from rc1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.18-4" date="1615032000">- Conditionalize static subpackage during build-time</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-6" date="1626696000">- Address important covscan issues (#1938846)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-7" date="1626782400">- Add gating.yaml</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="811eea93546a0247794c1d8fa806605293176c130458d109bb80164660e2f5dc" name="popt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-19" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18~rc1-1" date="1590753600">- Rebase to popt 1.18-rc1
- Update URLs to the new upstream</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18-1" date="1593000000">- Update to popt 1.18 final (no changes from rc1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.18-4" date="1615032000">- Conditionalize static subpackage during build-time</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-6" date="1626696000">- Address important covscan issues (#1938846)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-7" date="1626782400">- Add gating.yaml</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="98eb10c84daa6c0e4252b5a0c251128e696324f87d893ebf386a47ec1fa4c760" name="popt-debugsource" arch="i686">
  <version epoch="0" ver="1.18" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-19" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18~rc1-1" date="1590753600">- Rebase to popt 1.18-rc1
- Update URLs to the new upstream</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18-1" date="1593000000">- Update to popt 1.18 final (no changes from rc1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.18-4" date="1615032000">- Conditionalize static subpackage during build-time</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-6" date="1626696000">- Address important covscan issues (#1938846)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-7" date="1626782400">- Add gating.yaml</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ede8d94bbdcb24e2d97064b03fe2bf10850872f0d4887dc7b027ad67b8f9e251" name="popt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-19" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18~rc1-1" date="1590753600">- Rebase to popt 1.18-rc1
- Update URLs to the new upstream</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18-1" date="1593000000">- Update to popt 1.18 final (no changes from rc1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.18-4" date="1615032000">- Conditionalize static subpackage during build-time</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-6" date="1626696000">- Address important covscan issues (#1938846)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-7" date="1626782400">- Add gating.yaml</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="32240dcba06a2e664d8cc43f66aa4404204ad2e4e2a345c413a02626859258df" name="ppp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="5.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-4" date="1586174400">- Updated EAP-TLS patch to v1.201</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-5" date="1586260800">- Updated EAP-TLS patch to v1.300</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-6" date="1590062400">- Added missing options to man pages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.8-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-8" date="1597060800">- Added workaround for Windows Server 2019
  Resolves: rhbz#1867047</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.9-1" date="1609848000">- New version
  Resolves: rhbz#1912617</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.9-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-4" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c345d2e4c21897b20096bb36a6cfb434746f050e56d268de77226ba7618ca45a" name="ppp-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="5.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-4" date="1586174400">- Updated EAP-TLS patch to v1.201</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-5" date="1586260800">- Updated EAP-TLS patch to v1.300</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-6" date="1590062400">- Added missing options to man pages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.8-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-8" date="1597060800">- Added workaround for Windows Server 2019
  Resolves: rhbz#1867047</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.9-1" date="1609848000">- New version
  Resolves: rhbz#1912617</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.9-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-4" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="36c3d76812b6e2a8f6717367ab2fd2946d85dc35ea71475b16ee92e0c8608d97" name="pqrpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="3a357c7d4557cd953a2792a170b278acafd6ef69f18c9b2fef1e92f2d33c464b" name="pqrpm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="fe5ddfc9abb0e3049510ae5fcb70d5f24f093f0fb4564df27139d4493dbab957" name="pqrpm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="9d6515740dc2300139f2adf104634992ee1115c755d6a2f736938801184b3330" name="prefixdevname-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.0-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d91cc268c9de6b258140277fd6e6b9c812e8d320025f5e6f1a2d5e498a67d033" name="prefixdevname-debugsource" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.0-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c73569cd5079df95c32c0580a22486210b8b9c8322ad3abf60c3d6a7f54b4c87" name="procps-ng-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.17" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-5" date="1648209600">- uptime: human readable data not shown if 364 days up
- Resolves: rhbz#2067166</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-6" date="1659096000">- free: backport new 'used' calculation
- sysctl: backport support of systemd glob patterns
- Resolves: rhbz#2003033
- Resolves: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-7" date="1660564800">- sysctl: backport - keys with dots instead of slashes again
- Resolves: rhbz#2116977
- Related: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-8" date="1660824000">- pgrep: uid/gid overflow fix backport
- Resolves: rhbz#2119083</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-9" date="1669723200">- display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP
- Resolves: rhbz#2141697</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-10" date="1674043200">- ps: out-of-bonds read in quick mode
- Resolves: rhbz#2161648</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-11" date="1674734400">- version bump requested to create -devel subpkg for CRB inclusion
- Resolves: rhbz#2158253</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-12" date="1690286400">- sysctl: '-N' option shows values instead of names if '-p'
- Resolves: rhbz#2222056</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-13" date="1691755200">- ps: mitigation of possible buffer overflow
- Resolves: rhbz#2228504</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-14" date="1705924800">- top: processes for specific user not displayed if sorted by mem
- Resolves: RHEL-16278</changelog>
</package>
<package pkgid="34f62f1e9f8c0fcfb835ae16ba6a922ebc3268bbdf4a39b93e5e34e1e8b40957" name="procps-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-5" date="1648209600">- uptime: human readable data not shown if 364 days up
- Resolves: rhbz#2067166</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-6" date="1659096000">- free: backport new 'used' calculation
- sysctl: backport support of systemd glob patterns
- Resolves: rhbz#2003033
- Resolves: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-7" date="1660564800">- sysctl: backport - keys with dots instead of slashes again
- Resolves: rhbz#2116977
- Related: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-8" date="1660824000">- pgrep: uid/gid overflow fix backport
- Resolves: rhbz#2119083</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-9" date="1669723200">- display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP
- Resolves: rhbz#2141697</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-10" date="1674043200">- ps: out-of-bonds read in quick mode
- Resolves: rhbz#2161648</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-11" date="1674734400">- version bump requested to create -devel subpkg for CRB inclusion
- Resolves: rhbz#2158253</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-12" date="1690286400">- sysctl: '-N' option shows values instead of names if '-p'
- Resolves: rhbz#2222056</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-13" date="1691755200">- ps: mitigation of possible buffer overflow
- Resolves: rhbz#2228504</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-14" date="1705924800">- top: processes for specific user not displayed if sorted by mem
- Resolves: RHEL-16278</changelog>
</package>
<package pkgid="64fb8d14a1ddb3044ea6e601cbfe67f5e36b5f2cd2c04b40c64ca0eeb729cb1a" name="procps-ng-debugsource" arch="i686">
  <version epoch="0" ver="3.3.17" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-5" date="1648209600">- uptime: human readable data not shown if 364 days up
- Resolves: rhbz#2067166</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-6" date="1659096000">- free: backport new 'used' calculation
- sysctl: backport support of systemd glob patterns
- Resolves: rhbz#2003033
- Resolves: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-7" date="1660564800">- sysctl: backport - keys with dots instead of slashes again
- Resolves: rhbz#2116977
- Related: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-8" date="1660824000">- pgrep: uid/gid overflow fix backport
- Resolves: rhbz#2119083</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-9" date="1669723200">- display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP
- Resolves: rhbz#2141697</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-10" date="1674043200">- ps: out-of-bonds read in quick mode
- Resolves: rhbz#2161648</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-11" date="1674734400">- version bump requested to create -devel subpkg for CRB inclusion
- Resolves: rhbz#2158253</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-12" date="1690286400">- sysctl: '-N' option shows values instead of names if '-p'
- Resolves: rhbz#2222056</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-13" date="1691755200">- ps: mitigation of possible buffer overflow
- Resolves: rhbz#2228504</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-14" date="1705924800">- top: processes for specific user not displayed if sorted by mem
- Resolves: RHEL-16278</changelog>
</package>
<package pkgid="ca2e1159a6cd0f8cdf2e2b122cdbf6e6d0b69a182435f6252a8d2300d65992b4" name="procps-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="14.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-5" date="1648209600">- uptime: human readable data not shown if 364 days up
- Resolves: rhbz#2067166</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-6" date="1659096000">- free: backport new 'used' calculation
- sysctl: backport support of systemd glob patterns
- Resolves: rhbz#2003033
- Resolves: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-7" date="1660564800">- sysctl: backport - keys with dots instead of slashes again
- Resolves: rhbz#2116977
- Related: rhbz#2052536</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-8" date="1660824000">- pgrep: uid/gid overflow fix backport
- Resolves: rhbz#2119083</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-9" date="1669723200">- display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP
- Resolves: rhbz#2141697</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-10" date="1674043200">- ps: out-of-bonds read in quick mode
- Resolves: rhbz#2161648</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-11" date="1674734400">- version bump requested to create -devel subpkg for CRB inclusion
- Resolves: rhbz#2158253</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-12" date="1690286400">- sysctl: '-N' option shows values instead of names if '-p'
- Resolves: rhbz#2222056</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-13" date="1691755200">- ps: mitigation of possible buffer overflow
- Resolves: rhbz#2228504</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.17-14" date="1705924800">- top: processes for specific user not displayed if sorted by mem
- Resolves: RHEL-16278</changelog>
</package>
<package pkgid="5acf81fa2b6dd200e6d0c38125b2294250ff9d2c317f924abf496db29088df83" name="protobuf-c-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.3" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-10" date="1645617600">- Rebuilt for errata</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-11" date="1645617601">- Added gating tests</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-12" date="1645704000">- Adapt tests to protobuf-c 1.3.3</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-13" date="1681473600">- Applied patch for for CVE-2022-48468 (#2186677)</changelog>
</package>
<package pkgid="6cd4e6517d4d5ee8eeaf0b979838f87a9767f257cd69fed0f90ce4ec8cf5882a" name="protobuf-c-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-10" date="1645617600">- Rebuilt for errata</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-11" date="1645617601">- Added gating tests</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-12" date="1645704000">- Adapt tests to protobuf-c 1.3.3</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-13" date="1681473600">- Applied patch for for CVE-2022-48468 (#2186677)</changelog>
</package>
<package pkgid="8bc7311db778fdb4ceff2fe7ce29230e66698eeb4402f96fde42eccfe172a68b" name="protobuf-c-debugsource" arch="i686">
  <version epoch="0" ver="1.3.3" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-10" date="1645617600">- Rebuilt for errata</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-11" date="1645617601">- Added gating tests</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-12" date="1645704000">- Adapt tests to protobuf-c 1.3.3</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-13" date="1681473600">- Applied patch for for CVE-2022-48468 (#2186677)</changelog>
</package>
<package pkgid="ed187537082e0ca540c3a4a64193f66f5d84246e9608a1b1464babc3795140b2" name="protobuf-c-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.3-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-10" date="1645617600">- Rebuilt for errata</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-11" date="1645617601">- Added gating tests</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-12" date="1645704000">- Adapt tests to protobuf-c 1.3.3</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3.3-13" date="1681473600">- Applied patch for for CVE-2022-48468 (#2186677)</changelog>
</package>
<package pkgid="774c032299028c0334741273e86a52b6a209f849323daa9e457e8d240aa60623" name="psacct-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.6.4" rel="13.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 6.6.4-13" date="1757592000">- tmpfiles.d integration
- Resolves: RHEL-109878</changelog>
</package>
<package pkgid="14441d6ad5bdb0bd4f4647e51f5ee51822063db6aca125e2c893c4cbabc8a1c7" name="psacct-debugsource" arch="x86_64">
  <version epoch="0" ver="6.6.4" rel="13.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 6.6.4-13" date="1757592000">- tmpfiles.d integration
- Resolves: RHEL-109878</changelog>
</package>
<package pkgid="3e5f3568a1c090a3703f08a9c0ed3f041ecea0ae8057d760f1af891b2bae4ec5" name="psmisc-debuginfo" arch="x86_64">
  <version epoch="0" ver="23.4" rel="3.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.2-1" date="1573128000">- Rebase to v23.2
- Related: bz#1768993</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.3-1" date="1574942400">- Rebase to v23.3
- Related: bz#1768993</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.3-2" date="1574942401">- Rebase build failed due to missing peekfd export on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.3-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.3-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.4-1" date="1612785600">* Rebase to psmisc-23.4</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 23.4-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 23.4-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4170112ec1c6db38b389c96f1fe6079b05a29da68d7553be1f511ffb6e572b34" name="psmisc-debugsource" arch="x86_64">
  <version epoch="0" ver="23.4" rel="3.el9"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.2-1" date="1573128000">- Rebase to v23.2
- Related: bz#1768993</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.3-1" date="1574942400">- Rebase to v23.3
- Related: bz#1768993</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.3-2" date="1574942401">- Rebase build failed due to missing peekfd export on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.3-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.3-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 23.4-1" date="1612785600">* Rebase to psmisc-23.4</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 23.4-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 23.4-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0daf85b468fbfb287c5f8d66363735fb35f5346e3d6265e4803008b5257a6b6f" name="pygobject3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.40.1" rel="6.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-1" date="1599912000">- Update to 3.38.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-2" date="1601899200">- Explicity BuildRequire python3-setuptools</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.38.0-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1617105600">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.40.1-3" date="1620216000">- Add concurrency fix
  Related: #1957130</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.40.1-5" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.40.1-6" date="1655208000">- Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
- Move pure Python modules to a noarch subpackage
- Ensure Python bytecode installed in multilib packages is bit-to-bit identical
  Resolves: rhbz#1915764</changelog>
</package>
<package pkgid="c52bd623ba9e610ec36357c947d9957b47e7ad35f8d44e631b81d6e8ec382231" name="pygobject3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.40.1" rel="6.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-1" date="1599912000">- Update to 3.38.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-2" date="1601899200">- Explicity BuildRequire python3-setuptools</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.38.0-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1617105600">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.40.1-3" date="1620216000">- Add concurrency fix
  Related: #1957130</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.40.1-5" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.40.1-6" date="1655208000">- Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
- Move pure Python modules to a noarch subpackage
- Ensure Python bytecode installed in multilib packages is bit-to-bit identical
  Resolves: rhbz#1915764</changelog>
</package>
<package pkgid="b6c787ec29f285d55f7e71476fad2f62424bc87e8d27bc628177230a72dc5028" name="python-cffi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14.5" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.14.0-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.14.1-1" date="1597406400">- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.14.2-1" date="1599566400">- Update to 1.14.2 (#1869032)</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 1.14.3-1" date="1605787200">- Update to 1.14.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.14.5-1" date="1613131200">- Update to 1.14.5
Resolves: rhbz#1927933</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.5-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1.14.5-4" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.14.5-5" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="0b2241cb81974a4b0aed8a6f99fd33d1f2923e30aec084ce68540e39637f03d7" name="python-cryptography-debugsource" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="5.el9_6"/>
  <changelog author="Francisco Trivi&#xF1;o &lt;ftrivino@redhat.com&gt; - 36.0.1-5" date="1751457600">- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates,
  resolves RHEL-97450</changelog>
</package>
<package pkgid="a0185efa1cfa79f1f29f846be6a41d38069a05ddfac6ab0b40bc3870f9ee56ae" name="python-dmidecode-debugsource" arch="x86_64">
  <version epoch="0" ver="3.12.3" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 3.12.2-25" date="1626696000">- Fix several issues found by covscan
- Resolves: rhbz#1938852</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-26" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 3.12.2-27" date="1628942400">- Resolves: rhbz#1938852
- Resolves: rhbz#1992494
  Related: rhbz#1991688</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 3.12.3-1" date="1669204800">- Update to 3.12.3
- Add smbios3 support.</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 3.12.3-2" date="1675771200">- Resolves: rhbz#1981868
- Resolves: rhbz#2166716</changelog>
</package>
<package pkgid="26bd2fa37e274dab243b8ecb56a6659fb154ca7420d7026344581975fdae5705" name="python-ethtool-debugsource" arch="x86_64">
  <version epoch="0" ver="0.15" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-6" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.14-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 0.15-1" date="1629201600">- Update to 0.15
Resolves: rhbz#1976102 and rhbz#1977904</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 0.15-2" date="1642075200">- Rebuild for rhel-9.0
Resolves:rhbz#2040095</changelog>
</package>
<package pkgid="d5c308060dd373a59a34ea82e752d4ed9405d763c112d5e6f696f536057a9993" name="python-kmod-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9" rel="32.el9.0.1"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9-25" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9-26" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-27" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9-28" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-29" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-30" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9-31" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9-32" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e77fdfb7efa338b97d9d69538c68baea389d5370bf3e57c914f447527ce1572a" name="python-systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="234" rel="19.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 234-19" date="1718020800">- Remove weak dependency on doc subpackage (RHEL-5835)</changelog>
</package>
<package pkgid="a622aa7457f6705658622136ac4bb366d4785393b1a43dbd9d92c4073df12629" name="python-urwid-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.0.1-8" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.0.1-9" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-10" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 2.1.0-1" date="1585742400">- New upstream release 2.1.0</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.1.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 2.1.2-1" date="1604318400">- New upstream release 2.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1.2-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1.2-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f39dc9df7b13a0b77d19f031b621875455e18ae90525350168143eadbd821054" name="python-urwid-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.1.2-4.1" date="1784635200">- Fix CVE-2026-9323: use cryptographically secure session identifiers
  in web display module
- Resolves: RHEL-212564</changelog>
</package>
<package pkgid="cde474440dd367e4a942ced26002348d0cb11522884bbcf402332551158bb738" name="python3-cffi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.5" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.14.0-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.14.1-1" date="1597406400">- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.14.2-1" date="1599566400">- Update to 1.14.2 (#1869032)</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 1.14.3-1" date="1605787200">- Update to 1.14.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.14.5-1" date="1613131200">- Update to 1.14.5
Resolves: rhbz#1927933</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.5-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1.14.5-4" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.14.5-5" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="5c92e5082ac042be42a7bc8fa3e1cb15612bc9e47a51112c15f65802d1f244b1" name="python3-cryptography-debuginfo" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="5.el9_6"/>
  <changelog author="Francisco Trivi&#xF1;o &lt;ftrivino@redhat.com&gt; - 36.0.1-5" date="1751457600">- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates,
  resolves RHEL-97450</changelog>
</package>
<package pkgid="5362212659a1d6a926d28f356baf25e8a75a846a63e40e921cc0254658ea7089" name="python3-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.18" rel="2.el9.0.1"/>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.18-2.0.1" date="1714824000">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="c38915d2575ce473efd93c8b3121087e228fad35f62a902c051aefec9e5d3ec6" name="python3-dmidecode-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.3" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 3.12.2-25" date="1626696000">- Fix several issues found by covscan
- Resolves: rhbz#1938852</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-26" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 3.12.2-27" date="1628942400">- Resolves: rhbz#1938852
- Resolves: rhbz#1992494
  Related: rhbz#1991688</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 3.12.3-1" date="1669204800">- Update to 3.12.3
- Add smbios3 support.</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 3.12.3-2" date="1675771200">- Resolves: rhbz#1981868
- Resolves: rhbz#2166716</changelog>
</package>
<package pkgid="22b074a87e92f14e0f14d89626c787698841b3aad5d3ab8f1af727e4eb1f393f" name="python3-ethtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.15" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-6" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.14-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.14-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 0.15-1" date="1629201600">- Update to 0.15
Resolves: rhbz#1976102 and rhbz#1977904</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 0.15-2" date="1642075200">- Rebuild for rhel-9.0
Resolves:rhbz#2040095</changelog>
</package>
<package pkgid="3c14730bb4e94c368171359adbf907ee5e29ab01b6e876dea61289a556fc7895" name="python3-gobject-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.40.1" rel="6.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-1" date="1599912000">- Update to 3.38.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-2" date="1601899200">- Explicity BuildRequire python3-setuptools</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.38.0-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1617105600">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.40.1-3" date="1620216000">- Add concurrency fix
  Related: #1957130</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.40.1-5" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.40.1-6" date="1655208000">- Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
- Move pure Python modules to a noarch subpackage
- Ensure Python bytecode installed in multilib packages is bit-to-bit identical
  Resolves: rhbz#1915764</changelog>
</package>
<package pkgid="99d0e36c71081c5f1ef12c7efc2dbe33b9917d180027a5c54db3c1fe1fa78b81" name="python3-gpg-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-4" date="1626436800">- Fix license and covscan issues
  Resolves: #1938732</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.15.1-6" date="1645099200">- Rebuild
  Resolves: #2035319</changelog>
</package>
<package pkgid="7d476f43e1d46bbb20dd8184f945bd9fcf42e9194db8a9c3f06750045d2e188f" name="python3-hawkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-10" date="1713873600">- Fix calculating a difference between two same-version RPM transacations
  (RHEL-17494)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-11" date="1715860800">- Fix reinstalling packages which conflicts with themselves in
  dnf_transaction_commit() (RHEL-1454)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-12" date="1718971200">- Do not set a default SELinux creation context if SELinux appears to be
  disabled (RHEL-43232)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.69.0-18.rocky.0.1" date="1771243200">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="87f6948018621495bc5f29909f77fa9e5747378912a6eb39343452cfa602592f" name="python3-kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9" rel="32.el9.0.1"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9-25" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9-26" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-27" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9-28" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-29" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-30" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9-31" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9-32" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b57cd77b7bdc54d2158f87e05376db83566b1e59fad3e17c21ef1ece05d66d66" name="python3-ldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="98a8340a78108c90d0c94f05e013470b55cc457cfc3ef69c7cd27d3c04f1baa0" name="python3-ldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="3d4e730abad1810e2ea914ee2468508ec2e2ebbe79d6adde9507b614497d975c" name="python3-ldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="c59d39f25ca9563617ab8421febc92edf9033a93ecf02a6501173861833d7964" name="python3-ldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="7ef52e705ef8cb661e2b8bb18a28433c13bfc75eea99733dd9dbe75794759383" name="python3-ldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="b511c8588d4ffff86ad54f1f68b77de2e3e90b47639bf3c757a2478bf59fc8a8" name="python3-ldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="d29af5a55a23c5f58da91af94c1fa09d9b38ff1b98b94bab431f02ce1888c43b" name="python3-libcomps-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="33aaae3f4987829506e2a52a0b049c168d2cec7ea660e283dcac410594c843fc" name="python3-libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-10" date="1713873600">- Fix calculating a difference between two same-version RPM transacations
  (RHEL-17494)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-11" date="1715860800">- Fix reinstalling packages which conflicts with themselves in
  dnf_transaction_commit() (RHEL-1454)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-12" date="1718971200">- Do not set a default SELinux creation context if SELinux appears to be
  disabled (RHEL-43232)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.69.0-18.rocky.0.1" date="1771243200">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="2c2e351bd9963c2dc7765ccc94c76d87ab082fbc19714cfb42b2e14da747b15b" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="910960ac21b2aa69dbc1f386f8b9b015661ff49ff6422c671e73d3bc2f10dc93" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="f5ceaf02d895a3f90e8355b3e69c072a022b0f23a5ad5027a277a8ddac55a71f" name="python3-librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="361ea5131cae1d27a0932f6278cfba1d3776e0d732d2818ee90fa2b41c452ab4" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="6431eacfc26c0f1d4a4057d7ea920f88fc4ea0679003ff9ba41ea57bbe276236" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="e61496408432c50c9e12561097ca19ac5955bd228bcb06df3d18d29d0d88a427" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_7"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.9.13-6" date="1714392000">- Fix CVE-2024-25062 (RHEL-29196)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
</package>
<package pkgid="0f1416d4f798c152e82428b7f40888416d6755fc03b261aa58c56f1b945b4373" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="fd394e55dc5139efe39283f4a8028c5cc134e56f03af76891ccf45b5682d7dd0" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="a1c4fa2d5ebd38c84dc0f4e7fefd716d5e5ad3e9800e611afa837116d47a04cd" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.4"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.3" date="1785153600">- Fix CVE-2026-6653 (RHEL-215619)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.4" date="1785153601">- Fix CVE-2026-11979 (RHEL-215568)</changelog>
</package>
<package pkgid="6a2026b0a58856edefda4c4663586fcb344e63943d0772770d86ca145fd00d88" name="python3-pyyaml-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="6.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 5.3.1-5" date="1606132800">- Disable Python 2 build on RHEL 9+</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4-0.1.b1" date="1610625600">- New upstream beta release 5.4b1 (rhbz#1916034)</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4-0.1.b2" date="1610712000">- New upstream beta release 5.4b2 (rhbz#1916496)</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4-1" date="1611144000">- New upstream release 5.4
- Fixes CVE-2020-14343</changelog>
  <changelog author="John Eckersberg &lt;jeckersb@redhat.com&gt; - 5.4.1-1" date="1611230400">- New upstream release 5.4.1 (rhbz#1918523)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.1-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.1-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 5.4.1-5" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Related: rhbz#1990421</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 5.4.1-6" date="1644321601">- Remove some outdated Obsoletes and Provides,
  but keep providing python3-yaml and python3-PyYAML for users
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="d63b0cd4a567dbdf3d17aa59ba81498c0e101aa43e621d2c9d268d6182e5c164" name="python3-rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="0ca7fc26a7879875d59dcf7d9b3b19ff960efcd46afe57dde3ae74067b971a64" name="python3-samba-dc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bf1e4b1192b0dbe42f38874c64c4b6718eff2a5f39ed9dc415f1a561442e0c9b" name="python3-samba-dc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="c95c9397d86e9f159198473e85ae830daafddcc736ebc4366edc5be7f27ad689" name="python3-samba-dc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="3d2b509254c98e3efe98bb28d2514a703931f53b29ce673945d8f02b802c5f6a" name="python3-samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="5e36612bab103ba5f46b3c33e039a95481cc1e43898d529025c760e657173d8d" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="d8d675e37d28d2ab35e293423379af52dd4f5e16bbba912823b27bfdac5db8fb" name="python3-samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="a63b4832d7d91e4e95f1f441c3fd5d0d6aec3bcc2eb0805f4954c956c62cea5c" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="444e80cd15b5da409ec555c990265281b30e4b3119226bf395c3bd813a43d054" name="python3-samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="875ee70ab5022c0cc434c080f84353610b920acc27bef18759b5f44676f55c68" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="bf04d302e5ee43b4d271e2fbb6c19646b3e42509d0480c27348e289461f077f1" name="python3-setools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.4" rel="1.el9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 4.4.0-5" date="1654862400">- Update required userspace versions to 3.4
- Drop unnecessary Recommends</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.1-1" date="1675684800">- SETools 4.4.1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.2-1" date="1681992000">- SETools 4.4.2 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.2-2.1" date="1683720000">- Disable sediff --neverallow and --neverallowxperm options</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.3-1" date="1692014400">- SETools 4.4.3 release
- Improve man pages
- seinfoflow: Add -r option to get flows into the source type.
- seinfoflow.1: Remove references to sepolgen permission map.
- AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
- SELinuxPolicy: Add explicit cast for libspol message</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.4-1" date="1702382400">- SETools 4.4.4 release</changelog>
</package>
<package pkgid="f679ae6668246014f71c395c1964d0f28d7c3750c5d1a61dbff94db4e2fa727c" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="a530de9fc93040c012ada5cb77d13a4eb282856eee763385a88875cbe4abed54" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="37d00fd703efc001a1884a83df8adef3ecc92c09ab1efbaafe6e10b2c551c8b1" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="206cd8ac0e0c86187e1412eceb8885b97bd553dd615f0da223b11c455ee8b3d0" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="a2cf82c32993fbb44d91132f329ba82745ca8bc6d8d477b186e71751bc972040" name="python3-subscription-manager-rhsm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.29.50" rel="1.el9.rocky.0.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.42-1" date="1724328000">- feat: forcefully switch automatic cloud registration to v1
  (ptoscano@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.43-1" date="1734609600">- [1.29] feat/cct-868: Subset of list command options marked as deprecated *
  Options --available, --all, --ondate, --servicelevel --no-overlap --match-
  install, --pool-only, --afterdate were marked as deprecated in ListCommand
  definition of their help string. (mgrunwal@redhat.com)
- fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
- feat: Better automatic registration logging (mhorky@redhat.com)
- fix: perform autoreg waiting when performing standard autoreg
  (ptoscano@redhat.com)
- chore: move autoreg waiting code in own function (ptoscano@redhat.com)
- docs: update proxy details in man page (jvlcek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.44-1" date="1737720000">- Revert "feat: Disable anonymous cloud registration temporarily"
  (ptoscano@redhat.com)
- Revert "feat: forcefully switch automatic cloud registration to v1"
  (ptoscano@redhat.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Update translation files (noreply@weblate.org)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (German) (atalanttore@googlemail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.45-1" date="1739275200">- fix: Do not upload profile from DNF, when it is disabled in conf
  (jhnidek@redhat.com)
- feat: dnf plugin - outsource uploading of profile to rhsmcertd.
  (jhnidek@redhat.com)
- feat: Enable register with environment names and environment types
  (jhnidek@redhat.com)
- feat: support registering specifying environments with activation keys
  (ryanverdile@gmail.com)
- chore: Remove auto-assign CI job (mhorky@redhat.com)
- feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.46-1" date="1747310400">- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Italian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Update translation files (noreply@weblate.org)
- fix: Handle improperly closed connections (mhorky@redhat.com)
- ci: use the right distro for coverage reporting (ptoscano@redhat.com)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (toscano.pino@tiscali.it)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- tests: fix mocking of get_terminal_width() in TestColumnize
  (ptoscano@redhat.com)
- feat: print compliance errors &amp; syspurpose status only in entitlement mode
  (ptoscano@redhat.com)
- feat: print "registered" as status when using SCA (ptoscano@redhat.com)
- feat: print "not registered" on status when not registered
  (ptoscano@redhat.com)
- tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
- refactor: move determination of content access mode in own method
  (ptoscano@redhat.com)
- tests: move StubIdentity to stubs (ptoscano@redhat.com)
- tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
- chore: move banner printing to its own function (ptoscano@redhat.com)
- fix: Append two additional facts to the graylist (pkoprda@redhat.com)
- refactor: Use class constant instead of variable graylist
  (pkoprda@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.47-1" date="1753963200">- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Spanish) (jsefler@redhat.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
- feat: [1.29] Call random.seed() at begining of auto-register
  (jhnidek@redhat.com)
- feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
- fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.48-1" date="1762344000">- Translated using Weblate (Korean) (simmon@nplob.com)
- ci: bump actions/upload-artifact from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
- fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
- ci: bump actions/checkout from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.49-1" date="1769515200">- RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
- fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
- feat: check if --set arg is empty when the environments module is called
  (manuelcanorojo@gmail.com)
- feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
- fix(test): Fix unit test of aws (jhnidek@redhat.com)
- fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
- chore: Make new black happy again (jhnidek@redhat.com)
- chore: Increased log level of messages (jhnidek@redhat.com)
- fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Added translation using Weblate (Finnish) (noreply-addon-
  languages@weblate.org)
- fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
- feat: added signature type log in TLS handshake (macano@redhat.com)
- feat: added internal method to get tls handshake info
  (manuelcanorojo@gmail.com)
- ci: bump actions/upload-artifact from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix profile upload because of missing self.cp (suttner@atix.de)
- Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
- ci: bump actions/checkout from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.50-1" date="1769601600">- fix: Print list of environments without --set/--list (jhnidek@redhat.com)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.29.50-1.rocky.0.1" date="1769774400">- Remove Red Hat references</changelog>
</package>
<package pkgid="64398c3aebcf5c3549565bad73d97e876c1bd14f755d384fa43aa535b0b756c6" name="python3-systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="234" rel="19.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 234-19" date="1718020800">- Remove weak dependency on doc subpackage (RHEL-5835)</changelog>
</package>
<package pkgid="d76dc1324d145f5ea8be089fa2156e3d26184ea5b20e7e26752201b148a24809" name="python3-talloc-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="ffe6134926e568a89441f02e2b42229d7009ca2ce43fc10496effd64964c8b6c" name="python3-talloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="64fd311a9fe83405e9679355bd27837cfa4466a74eb2e9444dc88b12489ca109" name="python3-tdb-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="4b49aea24960dcf2a0727e3be693ea3a1f1aa501df5d2c36e7e67a7a9e91235a" name="python3-tdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="2821cc9519e92ea337df8c2f19657af13b35ce1c7a04ccd86c26ff1c5f6de458" name="python3-tevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1701691200">- resolves: RHEL-16481 - Rebase to version 0.16.0</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 0.16.1-1" date="1714046400">- resolves: RHEL-33755 - Rebase to version 0.16.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-1" date="1747656000">- Update to version 0.16.2
- resolves: RHEL-89881</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-1" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114550</changelog>
</package>
<package pkgid="a871d2c0828f9f29a4f17f1036963056b19e49004b50478cece9ac9264513736" name="python3-urwid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="4.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.0.1-8" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.0.1-9" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-10" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 2.1.0-1" date="1585742400">- New upstream release 2.1.0</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.1.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 2.1.2-1" date="1604318400">- New upstream release 2.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1.2-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1.2-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="40963e7ade2ff1848d807341a76028c7b8407d6ac25b76d5e472e77b8fc846fe" name="python3-urwid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.1.2-4.1" date="1784635200">- Fix CVE-2026-9323: use cryptographically secure session identifiers
  in web display module
- Resolves: RHEL-212564</changelog>
</package>
<package pkgid="11de7b86aa3819fd4eea46d1b4c64b657b460f05d83184d25d397e750caa4873" name="python3.9-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
</package>
<package pkgid="aa9734a15ddb2c5b2909c8e9b821a449ae14da93e03c87c0c5e15d1f3ce18e94" name="python3.9-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.3"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.9.25-7.3" date="1786017600">- Security fix for CVE-2026-11940
Resolves: RHEL-227228</changelog>
</package>
<package pkgid="c6eec08a5fa271683ad353fae0ee4da53acbcf4b0843b7434c62303a902d724d" name="python3.9-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.23-1" date="1751025600">- Update to 3.9.23
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.23-2" date="1755604800">- Security fix for CVE-2025-8194
Resolves: RHEL-106374</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
</package>
<package pkgid="8812f7f92f5fd9136b3af8ffe84773bbb42adbe8cfe0e2c74599b8b605c7df42" name="python3.9-debugsource" arch="i686">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
</package>
<package pkgid="a5fca9f9adb2a2e67e372100c1939b9fd5ca9f48bff0f5f6fe3cf4b10ae293db" name="python3.9-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
</package>
<package pkgid="282ca1e437ab20ec8e7818dfbc87a16f17f90eabc96a9875ec9c24bced7577d8" name="python3.9-debugsource" arch="i686">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.3"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.9.25-7.3" date="1786017600">- Security fix for CVE-2026-11940
Resolves: RHEL-227228</changelog>
</package>
<package pkgid="cc0a5bb6ac7ca1ec53cecdc539a6342e005fc73fc9b1adce519448eb9c43c214" name="python3.9-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.3"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.9.25-7.3" date="1786017600">- Security fix for CVE-2026-11940
Resolves: RHEL-227228</changelog>
</package>
<package pkgid="ee6f7c1306bccd7c8f7f0731f0f550e2cfb20550e9ccb1153e6644c7dc437790" name="python3.9-debugsource" arch="i686">
  <version epoch="0" ver="3.9.25" rel="7.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.23-1" date="1751025600">- Update to 3.9.23
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.23-2" date="1755604800">- Security fix for CVE-2025-8194
Resolves: RHEL-106374</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
</package>
<package pkgid="4d2e6cac3ee390b6bf5afd43d82acb9012639f7e71cc51ad92871ba311c88911" name="python3.9-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.23-1" date="1751025600">- Update to 3.9.23
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.23-2" date="1755604800">- Security fix for CVE-2025-8194
Resolves: RHEL-106374</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
</package>
<package pkgid="000daff28c7580d0136676d9b192b53c1afc3e70dcf31060c0f35982342a3bc8" name="quota-debuginfo" arch="x86_64">
  <version epoch="1" ver="4.09" rel="4.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-1" date="1718020800">- Update to new upstream version
- Add tmpfs quota support
- Remove rhel-only patches that were merged upstream</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-2" date="1721995200">- Fix regression
- Related: RHEL-50644</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-3" date="1726142400">- Fix memory leak
- Related: RHEL-50914</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-4" date="1726142401">- Fix patch application
- Related: RHEL-50914</changelog>
</package>
<package pkgid="cb381547bbec4e39cd3137ca571ed27730e3c2473b4e6ffb9f88ea95ab95d2ee" name="quota-debugsource" arch="x86_64">
  <version epoch="1" ver="4.09" rel="4.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-1" date="1718020800">- Update to new upstream version
- Add tmpfs quota support
- Remove rhel-only patches that were merged upstream</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-2" date="1721995200">- Fix regression
- Related: RHEL-50644</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-3" date="1726142400">- Fix memory leak
- Related: RHEL-50914</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1:4.09-4" date="1726142401">- Fix patch application
- Related: RHEL-50914</changelog>
</package>
<package pkgid="e570059b3a5ed5fc16279ba677d690d8c2197b547ff5b82708753ab53cbbb5de" name="rdma-core-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="c4fa8a6cab7bba040eca998735881b68721d3b53278e99f9668364e82de1ca19" name="rdma-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="851d479fde4a1cb13c7806f3cd95bf4e37dc9752d46bde269029e2ecbf698629" name="rdma-core-debugsource" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="c5b5a308b6e58021d1591c0077ea8d64ec75e9c241ae0ace642a5428298bde43" name="rdma-core-debugsource" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="a83a02c9dd9b40e49b16c65143e50570465db636a212d0404c8e42a4b42a6fc5" name="readline-debuginfo" arch="i686">
  <version epoch="0" ver="8.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 8.1-1" date="1609929141">- Rebase to readline-8.1
  Resolves: #1904867</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2329c2e464543878fc9b21d6a633efa5dca4e605e687d3eeb0d8a14978d7eed0" name="readline-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 8.1-1" date="1609929141">- Rebase to readline-8.1
  Resolves: #1904867</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2fc2a96cfb1b100f84a2e3ec32f3cc47f14d2825370bc694123b0139b60cd75e" name="readline-debugsource" arch="i686">
  <version epoch="0" ver="8.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 8.1-1" date="1609929141">- Rebase to readline-8.1
  Resolves: #1904867</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f456b408345743d6d0a418b78b8e960b7a28fb8dcb409ab3e3cb88aabff1d011" name="readline-debugsource" arch="x86_64">
  <version epoch="0" ver="8.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 8.1-1" date="1609929141">- Rebase to readline-8.1
  Resolves: #1904867</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b6caa2d0273c1c42ee3f33c23a1b17c5223bd40a68d222ec552b018b4bc9633c" name="realmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="2.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.17.1-1" date="1665748800">- Update to upstream release 0.17.1
  Resolves: rhbz#2129050, rhbz#2133839</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt;" date="1708430400">- Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
- migrated to SPDX license
- allow multiple names and _srv_ ad_server option
  Resolves: jira#RHEL-12112
- fix ccache handling for leave operation
  Resolves: jira#RHEL-5104</changelog>
</package>
<package pkgid="b15b23a3dec31f73119a1d7840d0d73b673b06758be158e21d138e67a5937f33" name="realmd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="2.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.17.1-1" date="1665748800">- Update to upstream release 0.17.1
  Resolves: rhbz#2129050, rhbz#2133839</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt;" date="1708430400">- Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
- migrated to SPDX license
- allow multiple names and _srv_ ad_server option
  Resolves: jira#RHEL-12112
- fix ccache handling for leave operation
  Resolves: jira#RHEL-5104</changelog>
</package>
<package pkgid="455e26356abc2e9b36e7ed68c3e1dede8d367c7cd768addc9a258a4455cfedad" name="restore-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.4" rel="0.51.b47.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.4-0.41.b46" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 1:0.4-0.42.b46" date="1580817600">- Fix FTBFS by enabling '-fcommon'</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 1:0.4-0.43.b46" date="1581508800">- Use library functions for manipulating xattrs (#1795953)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.4-0.44.b46" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
- Use standard make_build and make_install macros in spec file.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.4-0.45.b46" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
- Add make to BuildRequires.</changelog>
  <changelog author="Jeff Makey &lt;jeff@makey.net&gt; - 1:0.4-0.46.b47" date="1612785600">- New upstream release 0.4b47
- Update main URL.
- Drop dump-glibc_xattr patch, now applied upstream.
- Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
- Print correct name of archive table of contents file (#1727392).</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:0.4-0.47.b47" date="1612958400">- remove dump from RHEL environment</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:0.4-0.51.b47" date="1629201600">- rename spec file to restore
- add gating.yaml
- changes between .47 and .51 had to be stripped due of wrong sync
  between centos and dist-git</changelog>
</package>
<package pkgid="97438f984abc54e2cc8db0beae87a95ea556da46fb6238fd22c6533d22fe3ca3" name="restore-debugsource" arch="x86_64">
  <version epoch="1" ver="0.4" rel="0.51.b47.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.4-0.41.b46" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 1:0.4-0.42.b46" date="1580817600">- Fix FTBFS by enabling '-fcommon'</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 1:0.4-0.43.b46" date="1581508800">- Use library functions for manipulating xattrs (#1795953)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.4-0.44.b46" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
- Use standard make_build and make_install macros in spec file.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.4-0.45.b46" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
- Add make to BuildRequires.</changelog>
  <changelog author="Jeff Makey &lt;jeff@makey.net&gt; - 1:0.4-0.46.b47" date="1612785600">- New upstream release 0.4b47
- Update main URL.
- Drop dump-glibc_xattr patch, now applied upstream.
- Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
- Print correct name of archive table of contents file (#1727392).</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:0.4-0.47.b47" date="1612958400">- remove dump from RHEL environment</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:0.4-0.51.b47" date="1629201600">- rename spec file to restore
- add gating.yaml
- changes between .47 and .51 had to be stripped due of wrong sync
  between centos and dist-git</changelog>
</package>
<package pkgid="4b83991e5b0db597aaac107bd737388f627652c94c43540023787ee480de6762" name="rmt-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.6" rel="6.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.6-1" date="1569240000">- new upstream release
- drop WITH_SELINUX knob and selinux patches, there's built-in support now
- drop several patches which were incorporated upstream, except for
  changewarnSegv patch (did not apply, and not needed nowadays)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d9fb8a8627017e737cbab28415da134e931bea303c1609255d3ccc7dd88ac5c7" name="rng-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17" rel="2.el9"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.16-7" date="1711800000">- Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
- Use proper SPDX license identifiers
- Fix a test failure</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.17-1" date="1729857600">- Add Intel CET IBT instrumentation to assembly code
- Update to the upstream v6.17 @ ac43f912 (RHEL-64951)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.17-2" date="1750939200">- Disable jitter entropy source by default (RHEL-91119)</changelog>
</package>
<package pkgid="294da72ba9abc4b67e73038091a1cd2bf6e775583f4e55d9ab91bd8c9c85fe53" name="rng-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="6.17" rel="2.el9"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.16-7" date="1711800000">- Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
- Use proper SPDX license identifiers
- Fix a test failure</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.17-1" date="1729857600">- Add Intel CET IBT instrumentation to assembly code
- Update to the upstream v6.17 @ ac43f912 (RHEL-64951)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.17-2" date="1750939200">- Disable jitter entropy source by default (RHEL-91119)</changelog>
</package>
<package pkgid="18edc1bfad8d7e9403829f130100339019ac9b8aca05e1d2b8d28918347db91f" name="rpcbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="7.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.2.6-3" date="1660651200">- Fixed a double free in init_transport (bz 2115517)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.2.6-4" date="1660651201">- Use 
%setup       -q




/usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.2.6-5" date="1662465600">- Fixed a typo in changelog (bz 2115517)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.6-6" date="1707739200">- Add support for gating
- Related: RHEL-7884</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.6-7" date="1707998400">- Fix gating - use explicit script name to run the test
- Related: RHEL-7884</changelog>
</package>
<package pkgid="bfbd5678ac01adc573c41e8be0756f30364052ca0126353137acaceb72a7d878" name="rpcbind-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="7.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.2.6-3" date="1660651200">- Fixed a double free in init_transport (bz 2115517)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.2.6-4" date="1660651201">- Use 
%setup       -q




/usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


/usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
/usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.2.6-5" date="1662465600">- Fixed a typo in changelog (bz 2115517)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.6-6" date="1707739200">- Add support for gating
- Related: RHEL-7884</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.6-7" date="1707998400">- Fix gating - use explicit script name to run the test
- Related: RHEL-7884</changelog>
</package>
<package pkgid="a8bfa24190229a312c86675666668b1d5cfefd2dcd9f02cda63c4c206b72bf02" name="rpm-build-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="58f5a27c2e02c4de98036f3b38553475a53ec5da653dd39f5d254897187bde35" name="rpm-build-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="ea7fce1cbeeea8533fa7ee8c65a10d11f9c6fea0210e2641a10b0220cd2c8732" name="rpm-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="3f90793dbb6f0825c6b1438369beccb34521df8aa52d2f543fe466b33a2f2c5a" name="rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="4b91fe718cb0bb88bbd3dcba349c1e6a96efe40ab774d8d1cc5f22a6790e2024" name="rpm-debugsource" arch="i686">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="8afade752ee69eb7d152db3283bb2bef92910c087ac04f8912479ac15c6b5447" name="rpm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="a57b13e7577f68c247bfd35ff09cedcae55785a4f7b010b7fde907fdf251b9f4" name="rpm-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="d5d529213da9a60ccfc0bbc21327c0c7c7638b386035b56fd9672e694301c9f4" name="rpm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="1b192cd1b1a60d799345690939e67a56bdc8d3749f8dc7d6a3f4de83ecdc0d6c" name="rpm-plugin-audit-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="056e61f296790694ac6e7be4707b170bd61c9e7d3931ad36afc61bc6411b2f83" name="rpm-plugin-selinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="10926fe70bbc51f70d5743af95991ee9bcbfc0b9c7d0fc3f8f629929c7dd81d6" name="rpm-sequoia-debuginfo" arch="i686">
  <version epoch="0" ver="1.9.0.1" rel="1.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.0-1" date="1747828800">- Initial commit on c9s</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 1.6.0-2" date="1747915200">- RHEL-9 CI and gating setup</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.0.1-1" date="1751630400">- Pull PQC crypto to rpm-sequoia</changelog>
</package>
<package pkgid="e97bf74b932024f42e65eec2376b6777e07a284e08fd5407fc602e6bc78afe1f" name="rpm-sequoia-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.0.1" rel="1.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.0-1" date="1747828800">- Initial commit on c9s</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 1.6.0-2" date="1747915200">- RHEL-9 CI and gating setup</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.0.1-1" date="1751630400">- Pull PQC crypto to rpm-sequoia</changelog>
</package>
<package pkgid="05c814d1d7c40a6b8eaaa1f3c74c52e7aba106ecf3ede9d148e0f0c243e97f71" name="rpm-sign-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="a6a61ec7042457c9db7d2048532bbbb48fa6e724a905b38ed820dce854941cbe" name="rpm-sign-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="0e86d3ad092a1a47681bcb4a89743608791e583a66f8a61f4473bf8d72bc1798" name="rpm-sign-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="71ae0b4ea229689ad327b57426d9139a3255979d05fb7f06f2319382934af52b" name="rsync-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="7.el9_8.2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-21" date="1733745600">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5
- Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
- Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
- Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-2" date="1738152000">- Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70208 - Path traversal vulnerability in rsync
- Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-3" date="1738756800">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-4" date="1760011200">- Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.2.5-7.1" date="1779969600">- Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518)
- Resolves: RHEL-174952</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-7.2" date="1781524800">- Fix integer overflow in compressed-token decoding (CVE-2026-43618)
 - Resolves: RHEL-174932</changelog>
</package>
<package pkgid="37505693b193dd0c04be5b82796ad3c5095678495622b3f85ef9d4d608aca2ce" name="rsync-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="7.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-21" date="1733745600">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5
- Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
- Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
- Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-2" date="1738152000">- Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70208 - Path traversal vulnerability in rsync
- Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-3" date="1738756800">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-4" date="1760011200">- Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-5" date="1775563200">- Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-6" date="1777896000">- Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-7" date="1778500800">- Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files</changelog>
</package>
<package pkgid="6819334f93cefba709772319839aeda67441636ecb19e530acf46d732508ced9" name="rsync-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="7.el9_8.2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-21" date="1733745600">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5
- Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
- Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
- Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-2" date="1738152000">- Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70208 - Path traversal vulnerability in rsync
- Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-3" date="1738756800">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-4" date="1760011200">- Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.2.5-7.1" date="1779969600">- Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518)
- Resolves: RHEL-174952</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-7.2" date="1781524800">- Fix integer overflow in compressed-token decoding (CVE-2026-43618)
 - Resolves: RHEL-174932</changelog>
</package>
<package pkgid="93611ba6d31564ca6079e33fe87b20c8f15f11c502d623119e6dcc13a4ea6224" name="rsync-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="7.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-21" date="1733745600">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5
- Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
- Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
- Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-2" date="1738152000">- Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70208 - Path traversal vulnerability in rsync
- Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-3" date="1738756800">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-4" date="1760011200">- Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-5" date="1775563200">- Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-6" date="1777896000">- Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-7" date="1778500800">- Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files</changelog>
</package>
<package pkgid="a2b36eca0ad043572699a4fc599b7745991e123a2f68cadd995ce2de1b30bfc3" name="rust-rpm-sequoia-debugsource" arch="i686">
  <version epoch="0" ver="1.9.0.1" rel="1.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.0-1" date="1747828800">- Initial commit on c9s</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 1.6.0-2" date="1747915200">- RHEL-9 CI and gating setup</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.0.1-1" date="1751630400">- Pull PQC crypto to rpm-sequoia</changelog>
</package>
<package pkgid="63f00948e6975e6d9635c1efb1514b8d2454d60091718ccf13fddff41eceaab7" name="rust-rpm-sequoia-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.0.1" rel="1.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.0-1" date="1747828800">- Initial commit on c9s</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 1.6.0-2" date="1747915200">- RHEL-9 CI and gating setup</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.0.1-1" date="1751630400">- Pull PQC crypto to rpm-sequoia</changelog>
</package>
<package pkgid="bbba42286b5fd47ca6a050ef5ab1ebe185b84f8f7b70f67a5e9415cc94cfb3e7" name="samba-client-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="f7f45b505cb715a7aaf7296724b0a8a8d2fdb05b9c9b329832fb800529c7450e" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bdcf638b07138e034b585276dec0f42bb54b8b1f5bddf166dce8c360da97dcf0" name="samba-client-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="8eec6ac956375bd06650b38ab8bdfb2a0317ecbc4478bec9808f25a9af08d5d1" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="95058f4c6e21bc67ab931ec97618e60aa5b7509c9451664060a224cb634dc4ad" name="samba-client-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="1a1955b57b04f63d605390ceca46980c07c2f063a3297d7e7ae5b40017e9be61" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="54fb8b56fb7e188ddb5bf5bb0e81474fca69f93367688fcb812e17099b0c3f7d" name="samba-common-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="d2373804cfdfa1e5f65b98d90f6ad59f8f2d2afdabd333eacd9df89faee5ee95" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="987922a79f9bf3d14da07975992398820d73d8a932fec6a557364405f1278f80" name="samba-common-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="957244d776a38336fe7ae28de8aee57fd76ef80ad77f770472454b64b6058bdf" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="54e01c0d83b2f652dd2c6406f521c33c23b986fda691809f933a93615594a06a" name="samba-common-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="d4c5c77b2677ac072cb963f5e9ba9d596febf65dcd57ad59db0daaaa526f449a" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="fedae00163cd5515f1203ddd9f8018aa1828b141644e5a7fc18a12765ffba425" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="518726d9f62d69c44363c41b754120ce6ac9425e92ff6e3a1444ce76a1255e58" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="36e088bfdb483e1fa0ac26002e04c77eef5edecf9a30ce9e8919edfea6ad85e9" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="476e0a78a8089ae7bd794fa5f6d4bc2084df89e02936e00e30c49b313f66d7c0" name="samba-dc-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="3aa7e2f426cfa53645536c2795a365496b1e4990fef5f4ddaf93b006ac8cbdaf" name="samba-dc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="3d1e86556ccc4c4697d23d1436be85c54bfff878f42b81720b3254e3235f584c" name="samba-dc-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="4591ab840bf5a4830fe49306b8bc72f398a741c9817dfb1bed3c1cfbc9a19eb8" name="samba-dc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="f9995a6231957bc6ab6a745df10e41d4822bec15c36c1740735c13b964952a38" name="samba-dc-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="7fc5c7730f1448439d43eb6cdc4de9f377d70854d5701d510b4b6566c65152eb" name="samba-dc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="947017e8cc6239e80728e5a4605ec557afc53b6bea0af2b914c32a941cf74834" name="samba-dcerpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="b7cacba8cbeec689e3f75594b177ac0814a51513da5628743a8b97bef5565cb4" name="samba-dcerpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="c2177ce9539ff5ced6d406a2460bf7bace07b367a1cc9b0edabcb56b6ea8230a" name="samba-dcerpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="ca84b5b3eeb2db2bcc562397d14e2d1b32b22b3526c141fbd26451f016030d1a" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="2b77311a82b1b05252e6630acaa3310f486f90ca9cf69d4eda0ebaa2ac93b714" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="9eda30a07d93abe9670b82aab9221471cb0ce7ca737abc320ee7de7a3cfead80" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="f1447362e9fb33bc52c5777424a3c2f8e2e44247191160a38ec08ce4aae68258" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="dd83eb48eb45424a30f46c73c168834ba55835c5602e1d705f2b096094836e1c" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="246065f616d23118ef7a3d05a8721170a5834a38d2da15b8b07f7052598044b0" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="c2886f13c83497e761b9c606d98ee12909be7fefa65693ad6ef3a9244e2900b0" name="samba-debugsource" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="4d7c3b45d593cce9b46241fafe46fac253de4a03cc113f8f7bc8cfc2f35e2de6" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="19fd2f6beeff40c7c7219a4ef7df57d64b55d2005d8b7245c40410c949fd1bc4" name="samba-debugsource" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="e6ca3868e59b26342928ebe78466b7f65ddcb7bdc8b759a24285d99e031597ae" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="a9b86296e6d07cee4d6bb48e1d7380c8dfa40df2b2e0c5f745056327ddd21aed" name="samba-debugsource" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="712ea3c87fb8f59af8ac4f9b234d5a865c8c64173a558f56dc9735d6aae90136" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="e7ae742d17855243626ba338354373d4968a21bff72fce86e5baaf9b673650e1" name="samba-ldb-ldap-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="80f28acafbe0ab4f2115cae65a270a407113a91728ef6675da2b0fc8706272cf" name="samba-ldb-ldap-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="52c564b86ba9057b008d8a79d8b0d7c624542475dfc9a99bd0d7a323c00f1bb9" name="samba-ldb-ldap-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="8383b8932361fed09f4662993f09dcddfe40700e4eb9d9959a2cb6d568d92baf" name="samba-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="331f0da1710106abee405e661ffc291e7a017f8acd06fde55ac2dc514c85d62f" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="f6136e836e0c4a6b531fd01704560b61cca012437f63b7859f04af022ce766a3" name="samba-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="795eeadb1a57439e6f7ea9f3b0580c5e707900b4e05abec352d9f28a92d7f9e5" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="12b8ee66bd126c3f3375bc146f4eea7d0a304e03b5220a1fc6b0530358691938" name="samba-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="4392e9cb4c0dc5fcdf9fb1caa1568d7a1666f3d1adb480cfcebb56bb004cc4e4" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="e267e1b4e2f9a7260a96226046a01c6385d0fad97ad6293c0459b2697ecb69f5" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="f5b8ff278622323ec8717eafebda7c655b9c6e4ade8b6af35a8ec742de2e1e25" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="7430ba029366ec46ad96d5c290d08cda91f738f8fcd6ffa9deb09ca4038805ab" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="123d13fdf58f8a911cc938524012364f015d35a3ef60635dbc3bc71bff3f63cf" name="samba-winbind-modules-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="9b6c186b8dffd861ea9027ae319f6408808fb29ce202622150febedc030501da" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="56866d8b19de3d28da9a223f5ebeb7fd24ae30a66fe4e99c1f9d9dae7b4cb10d" name="samba-winbind-modules-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="79c5dc02b2ddc3f16e7dfe1ba1548d0673e7ff605d2060d183bf2de926d6e3c9" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="6.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-1" date="1762516800">- Update to version 4.23.3
- resolves: RHEL-114548</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.3-2" date="1765800000">- Remove osci.brew-build.tier0.functional from gating.yaml</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800001">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
</package>
<package pkgid="fb654bbb80f969ee3b6ef24f7b96594408a5ace7659380dba9bd1cd4ad3bd77a" name="samba-winbind-modules-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="7398d59da5591e83df6c8e38fbfc6fbd212a620ab1150bceabe6c3e5eabd180d" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="8.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-1" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114548 - Update to version 4.23.4
- resolves: RHEL-132995 - Fix Time Machine backup
- resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.4-2" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-133003</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
</package>
<package pkgid="4e17ca2c62c7b23e694192703bf1a0ca0930c94ab81e22ddfba8a836e2afabca" name="sed-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8" rel="10.el9_8"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 4.8-10" date="1769169600">- lib/dfa.c: Increase the maximum size of the transitions table
- After changes introduced between sed 4.2 and 4.4, some regexps
  started to hit the table size limits. This lead to repeated deletion
  and rebuilding of the table, leading to massive performance drops.
  While the core issue is still present, this change should at least
  help by moving the threshold of the regexp complexity that triggers the 
  table rebuilds.
- Resolves: RHEL-144026</changelog>
</package>
<package pkgid="afd6a66ae4486ed8c5aa33a7adcb5a160de93475f1ce14454033eb956658a1dc" name="sed-debugsource" arch="x86_64">
  <version epoch="0" ver="4.8" rel="10.el9_8"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 4.8-10" date="1769169600">- lib/dfa.c: Increase the maximum size of the transitions table
- After changes introduced between sed 4.2 and 4.4, some regexps
  started to hit the table size limits. This lead to repeated deletion
  and rebuilding of the table, leading to massive performance drops.
  While the core issue is still present, this change should at least
  help by moving the threshold of the regexp complexity that triggers the 
  table rebuilds.
- Resolves: RHEL-144026</changelog>
</package>
<package pkgid="83313132c6fab4af074a2127321fd1c716ae47f101cce2aa9a2affa287acef13" name="setools-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4.4" rel="1.el9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 4.4.0-5" date="1654862400">- Update required userspace versions to 3.4
- Drop unnecessary Recommends</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.1-1" date="1675684800">- SETools 4.4.1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.2-1" date="1681992000">- SETools 4.4.2 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.2-2.1" date="1683720000">- Disable sediff --neverallow and --neverallowxperm options</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.3-1" date="1692014400">- SETools 4.4.3 release
- Improve man pages
- seinfoflow: Add -r option to get flows into the source type.
- seinfoflow.1: Remove references to sepolgen permission map.
- AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
- SELinuxPolicy: Add explicit cast for libspol message</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 4.4.4-1" date="1702382400">- SETools 4.4.4 release</changelog>
</package>
<package pkgid="4e26ebab4f4dd6b2e58ecc6171068de3d15a1598421276a91f60b11a60bf2f5a" name="setserial-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="54.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.17-50" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.17-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.17-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.17-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.17-54" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a85c46056e10fd9522f8f0910c1fa2a1b86686cfa2af36dab29541e288d8e126" name="setserial-debugsource" arch="x86_64">
  <version epoch="0" ver="2.17" rel="54.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.17-50" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.17-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.17-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.17-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.17-54" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="952c2c4eee3334ed6a92f6c7f820fd65d8aadedbbc7a8162d05ffec352e41889" name="sg3_utils-debuginfo" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
</package>
<package pkgid="2870502b93c3cbf7f6445d5c6968b40cb841096b1f687a8f3e60e06cdea719ca" name="sg3_utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
</package>
<package pkgid="b692abcbde2e30c43c331639ebf7d2e213df506e286f25023fddffc4ded5ee83" name="sg3_utils-debuginfo" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="9e0011b32168ee23797f174275320117009f57026fc60e52d7455d8df72f3faa" name="sg3_utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="6bea7674d14b74d9f2415da9978107f86147f56e139ecab67aaf75b4962e8843" name="sg3_utils-debugsource" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
</package>
<package pkgid="c7a04794463744970a2886debd648a6fdcff522b9a77656a93a45b9ebfc3f8c3" name="sg3_utils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
</package>
<package pkgid="7423108f7ec6d815f3545aa6971eddabc5fab1c7f95017ec93899c358655f6a8" name="sg3_utils-debugsource" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="95ac4939e48dd38f7e3d20bf6297caed8f83ff60484cba74e1de1e0735f16463" name="sg3_utils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="82ce0773c1fcb5e4542db8356d1ba132eeb3a8d013f4efc2d5b974507ace7fa7" name="sg3_utils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
</package>
<package pkgid="5f62e971a53cbd870a29bc3dfe05b52f0f3273cb2174ebde9ef679d86e154a3b" name="sg3_utils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
</package>
<package pkgid="642f744dde0e9d90ab8e54983fb92fd6f715fa541bd10e9b8e24d983f0513bc8" name="sg3_utils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="998347798d45df5f51afc52bd2d7705afa1c5d32bc3791dd37f5ecbd0732f014" name="sg3_utils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="0ee5de1191f7ddfcf44fb0e4bdf086216c8c744bea495160d0d38c17879b5019" name="shadow-utils-debuginfo" arch="i686">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="33e1beac56b7caa53e2c0b20b23dd116dc5a08f8d910d1c4f626a05eb5568e45" name="shadow-utils-debuginfo" arch="x86_64">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="a39ee0626c9be9f353f092855f38989c47598132a8caeb8fbf59f42037c5917c" name="shadow-utils-debugsource" arch="i686">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="352596de80246a358490ae7fe22db9124adbdd44e4eb752e980503b47c9cdc06" name="shadow-utils-debugsource" arch="x86_64">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="33f1964850786c8a5a163e88c852a4b6a5c850fd2e4ca1c11a0e2bb5652880f6" name="shadow-utils-subid-debuginfo" arch="i686">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="ebb606cbe2465f63bdd2dee1094eeb23e59ed6efdedc6260b63c50fa1e9b4ca4" name="shadow-utils-subid-debuginfo" arch="x86_64">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="ea06750af170fe55b3c148571dce83c2c47b29ed40df34553220c5506c007618" name="shared-mime-info-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.0-5" date="1604836800">- Own the generated files (as %ghosts)
- Fixes: rhbz#1486468</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.1-1" date="1609761600">- Update to 2.1
- Fixes: rhbz#1911850</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.1-5" date="1667822400">- Fix build with a newer Meson (that we might rebase to)
- Resolves: rhbz#2140541</changelog>
</package>
<package pkgid="2d35a4a9e36d480f3e61f269b8d28f9fef32a32b14ab2400b1eb7243916e5e73" name="shared-mime-info-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.0-5" date="1604836800">- Own the generated files (as %ghosts)
- Fixes: rhbz#1486468</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.1-1" date="1609761600">- Update to 2.1
- Fixes: rhbz#1911850</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.1-5" date="1667822400">- Fix build with a newer Meson (that we might rebase to)
- Resolves: rhbz#2140541</changelog>
</package>
<package pkgid="da896d45594859b713b803b258a67d280ae47267d220bd088f5b801543ac59df" name="slang-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="beef260b61eb16262658f8e4d0092ede2c5c296c1b08cc78a2d1bdf6cd084ae3" name="slang-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f16132dda41fbf0527714731ae116291514310ed6385f1b41a9a08f88b17257b" name="slang-debugsource" arch="i686">
  <version epoch="0" ver="2.3.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9379efe6602df60623b6d0d2b605e757132576347ca83dc4573795868dbfdc29" name="slang-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="437a68ac3b2a92110a64953255327b6c94e05a2ad2ffab7fef48a1757f30d7e4" name="smartmontools-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.2" rel="10.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-9" date="1705406400">- smartd would not start with huge FD limits (#RHEL-15505)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-10" date="1765195200">- use tmpfiles.d to create /var/lib/smartmontools (RHEL-132500)</changelog>
</package>
<package pkgid="7247a68835e28a9158f3ae0a5394246bec87a412f30cea1dd815bb76948b3d78" name="smartmontools-debugsource" arch="x86_64">
  <version epoch="1" ver="7.2" rel="10.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-9" date="1705406400">- smartd would not start with huge FD limits (#RHEL-15505)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-10" date="1765195200">- use tmpfiles.d to create /var/lib/smartmontools (RHEL-132500)</changelog>
</package>
<package pkgid="5bf8677ef195d6337c2552b89ba78d82afdd797d2793d2963476adbabbd773ae" name="snappy-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.8" rel="8.el9.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1.1.8-8.0.1" date="1731499200">- Rebuild to address build system issues</changelog>
</package>
<package pkgid="f095967c01926e4847291b978b42a0437e894303a9c86dea47630ec7164aa5e6" name="snappy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="8.el9.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1.1.8-8.0.1" date="1731499200">- Rebuild to address build system issues</changelog>
</package>
<package pkgid="82c187322f7b08ec645fdfc455ddba52d7f44650c01bd9faf2eb61cdeab541d6" name="snappy-debugsource" arch="i686">
  <version epoch="0" ver="1.1.8" rel="8.el9.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1.1.8-8.0.1" date="1731499200">- Rebuild to address build system issues</changelog>
</package>
<package pkgid="8a1aae29314374b2592aa5962b3c7d173b52420496b1ef8569f2562e82aea233" name="snappy-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="8.el9.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1.1.8-8.0.1" date="1731499200">- Rebuild to address build system issues</changelog>
</package>
<package pkgid="ab03caeaa3a908f953ffeb406c880ab7b18d5981035cd6376b603efe2c2af7e7" name="sqlite-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="f853bb0a530b58716984c82e97464ea207c3ea8198cb8fea8999c0c76d088206" name="sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="53bdc697c4d087ef77d08d6e599d1b285ff32c9b909485bae098bbb7163065a4" name="sqlite-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="bfe4a4f0f56279ec2555693a35c6d2c2c9e2c1ef25e59dde5cbf371fa259381b" name="sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="036463597a38b0adedc6d1ee5164fc73e8c1dc610e9e03e641e7a43d79e97718" name="sqlite-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="9.el9_7"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.34.1-7" date="1704283200">- Fixes CVE-2023-7104</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
</package>
<package pkgid="4bd07ed92b695d3ad15b5a5d33454daa280d70d6062e0ae9950cc87c922072a9" name="sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="9.el9_7"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.34.1-7" date="1704283200">- Fixes CVE-2023-7104</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
</package>
<package pkgid="b5779b5287db5bb4f26fbbbce5ebbacd71c8068d60f58a0fc8e18ba23b60635f" name="sqlite-debugsource" arch="i686">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="d39956c95eb33cd2391b2a23847923b5e6fcedc066bb171a662762f03a5c5352" name="sqlite-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="9897999f24eb908690802557f10f105fb2e3841e174e999148d8b50259853bd6" name="sqlite-debugsource" arch="i686">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="4501c5ab234cc3b15dc46a0a02ccec4147df28d00f6116d6809559b11c376f39" name="sqlite-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="038b285180fe5bfc03732e5b39d7d396ca410d2556730cd858a06b10c3854d30" name="sqlite-debugsource" arch="i686">
  <version epoch="0" ver="3.34.1" rel="9.el9_7"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.34.1-7" date="1704283200">- Fixes CVE-2023-7104</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
</package>
<package pkgid="a55c8ae94a9b663573f3ad8f19ec714de10b5fc1ec66a6c6ea8639f07e05287f" name="sqlite-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="9.el9_7"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.34.1-7" date="1704283200">- Fixes CVE-2023-7104</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
</package>
<package pkgid="52eb7ac7f45f5dc654434f4e456602233c46f6a087d5b43a79fb9a93c5071e7f" name="sqlite-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="ee8ac02ddf88489e6fea65525f0624ece9f31194536bcebdc8d24e164b5f8950" name="sqlite-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="58404108112d5910758113017eb56b44f42803860afb1f1b5f54b9f0bb530ca4" name="sqlite-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="7fcbf8afa21db4541dbc38f0051060a0e3ec86c36d44bda09ffd5dfa242e616e" name="sqlite-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="e372dd9e6aa4e5cb771fce1e4f001cd531b014b7991ada7c93ccffd27df445d6" name="sqlite-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="9.el9_7"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.34.1-7" date="1704283200">- Fixes CVE-2023-7104</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
</package>
<package pkgid="3f354541568d56beca6de894e3d6ab55ff47be2463a8c8073dbbc87e28617f60" name="sqlite-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="9.el9_7"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.34.1-7" date="1704283200">- Fixes CVE-2023-7104</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
</package>
<package pkgid="3c96d8078a9f682a09d33b5f549703f775eaaeb9f0b4dba0aa81d8fbc812df9f" name="squashfs-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="10.git1.el9"/>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 4.4-8.git1" date="1641988800">- limit CPUs on large machines to avoid running out of resources
  rhbz#2023218</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 4.4-9.git1" date="1653912000">- CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
  rhbz#2000638</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 4.4-10.git1" date="1694606400">- CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
  rhbz#2007304</changelog>
</package>
<package pkgid="5ac71568b5ff170cf92d54afdae2a09f6363ce2f5973201ce39a0f411eebd3ac" name="squashfs-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4" rel="10.git1.el9"/>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 4.4-8.git1" date="1641988800">- limit CPUs on large machines to avoid running out of resources
  rhbz#2023218</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 4.4-9.git1" date="1653912000">- CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
  rhbz#2000638</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 4.4-10.git1" date="1694606400">- CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
  rhbz#2007304</changelog>
</package>
<package pkgid="3dff9f64fdfeb59fc2f489b7a03b8993f08d7462e01426d0f7db8b4719b0f56e" name="srp_daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="953484c8bb274494fa763414847a9f642907c54a4740625a15edf8fb05d77405" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="72d00ceb3dae2eed343ab803d3d65e8e3e521d344d1f45f151489a045acd4561" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="f0307036e23cb2ca52aab4878d9501a81d8836d99c5582d3aa2991151a8146f2" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="e41f6fd8aad58219a66071b4bf593f4aa0d6d311e903c1d05ab8f823895d2e4c" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="2e7c0cbe1057ae40e9a9929fcf1ae2306d83c6a76b631aeb827acf676e96606c" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="5c041f9c8fb2ab29ded92460cd9deef1a4d92c1529356b33bd0516a47fe37701" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="f65c21767d584d87d07eb828af5315ae63b6a193a6d8c453895d5b7d86b9f364" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="b6139622bedd95fc206356e6811d9506aba35e01f494b3541faf643eff21b939" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="68f848936a18d020aab90c5b466c9ae49ffdbe7cac88ae600904ebff6a82b21b" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="cea25de94b0894f45a95522c26f16170f2c5c4d2d47c80361d8ce510f98d8112" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="5dccc4d5fa5bd7ab8349532675a5f21f0f189b149abf58ed57d871c078bb5fb4" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="ad2319cca6e971dcd691f5624b0f66a4fabc816ebb3998c0320c6622f5c2ee00" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="aafb121e91fef82571042b584a8aff52c592b9d995aad7f0b1b539d94298a167" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="bf311c7b1944f28dc080556e92db138435e2ebbe6dfa44255db04a5dd9d916b2" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="265381d21a98aab0763664374fac989782a31fca6ac47f9e26d44414c29a79fe" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="7f9cc1324c21c7052b8ed68ab1cfe78581b1b6c6d9a26fee72f8cbc5e4e1090a" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="e19bdf7571be356cb6453d8628cc99dc32467aac84159b26b4eef9e4cdf36eda" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="2555d5fde36d9dc26ff468ff794dc83adab301ab36cfb6ce4790334176b50aaa" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="9c009e63c8a887e79aef7ee85fbce825df8d036a84b5aeeabacb1f98ccf538d7" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="9f936b3f05b90a9ca5942d083ca6eccefb0aef50b0cf54797c3ba211dd9feef7" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="239cb3bdb54d33af0de82b025c60a386752321a4203e8c8f0701be8746e5b0e9" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="1f4fefef36b1e85d489835e64a772cbfe4f6e00c523b744b7444607edf1d5150" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="a1882c299868d033ab313602b3db704593380b53264cf7b8ae59cbbdd114c484" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="8f8bc7886b15dbed6cd8f2a2bc360b97639de30a51483de81c10e8a3a32db6eb" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="252d04b8ca080135087010bf79d7616e4d7b458d9c98baaddb8b852b3361e23d" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="6c48e3a9b2456bdd07302ea247defe2429f0efb258f0c2c86ed4f5081a549fb6" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="4f9a1189062e59930fde5c8c184e39e62aff354e38a564ce18770fa3ac2d906a" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="536793efd1e6c1d3f97b32ece67cabdf7c2ea34621eb92fcc552465fd4911545" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="78666d8905fd8d8d4d7de1e0c65e9c65f535efabfd7cdda99a38d73a966fdb79" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="8cff77787463ecc53689dd6cabe6f4abcd324edcaf95eedac738e269ad0a33d9" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="7a5c78f939a07bf3f132fe5acece97b833f0b9ac97b604a96935e8b9093b8a68" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="210609bee2f8c8988ae9ec67e621073545e6fc58cf860f80602280909051b1ab" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="8bee616ad1bed7d75a0dcd4eb359f492ae1b08930bae1c8196b5fba2d5c5e922" name="sssd-passkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="c5757750c1138457b2071d5ada6ca684ed0265c3d531e1bb524c15ba21edf74d" name="sssd-passkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="8d2bdb8d6a00d5a383199ee10288ca1b0d382314857d02af064056f1269e80f8" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="9f26e4e5da98003bf33e9ef0eb75e6ccad0a26aad963d61f65388a4a8df4c663" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="6aa5ed17531148ad7eb29378076fb6118a765bc58016f5916bf005ac100b60dd" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="197eb438b98e9b335744a393c671d8e355c4971e5b301b0f9ed9f619aa9a4b1f" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="ae4ea2a6545de8fccdc24bdb3a7dff32b2e291e18d4febd198fda9cc7c0f5088" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="d62d2f897cfe64f2c8cf80a8c0120ab3166bea963b3cac861554e85719dede0a" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="b9ce5fff96db97c4dc63a78ad30379386c524a911c5fcbbce0a75ff703bc21a6" name="star-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6" rel="6.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.6-1" date="1569240000">- new upstream release
- drop WITH_SELINUX knob and selinux patches, there's built-in support now
- drop several patches which were incorporated upstream, except for
  changewarnSegv patch (did not apply, and not needed nowadays)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f1bc0528786cd8ffcf1c0e2279f0e64daa25fe4cb19b6ebc1da42db1e86c681b" name="star-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6" rel="6.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.6-1" date="1569240000">- new upstream release
- drop WITH_SELINUX knob and selinux patches, there's built-in support now
- drop several patches which were incorporated upstream, except for
  changewarnSegv patch (did not apply, and not needed nowadays)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b885425b655d80409c7aadd43283343326b1d48e55b7ea5885a931f7067f67cc" name="strace-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.12" rel="1.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 6.7-1" date="1706788800">- Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
- Updated the SPDX license expression.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 6.7-2" date="1730203200">- Fix incorrect syscall name reporting in restart_syscall() on attach when
  PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
- Update net-yy-inet* and linkat--secontext_mismatch tests.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 6.12-1" date="1735819200">- Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
  "-isystem /usr/include" from CPPFLAGS (RHEL-8646).</changelog>
</package>
<package pkgid="c92382275c81c5852711ab1f845ed6eb0591e96dc9d630c8936ace3e34f8da3e" name="strace-debugsource" arch="x86_64">
  <version epoch="0" ver="6.12" rel="1.el9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 6.7-1" date="1706788800">- Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
- Updated the SPDX license expression.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 6.7-2" date="1730203200">- Fix incorrect syscall name reporting in restart_syscall() on attach when
  PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
- Update net-yy-inet* and linkat--secontext_mismatch tests.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 6.12-1" date="1735819200">- Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
  "-isystem /usr/include" from CPPFLAGS (RHEL-8646).</changelog>
</package>
<package pkgid="cef3b7b272e3260c3de9f951c53cd7aa298bb3e4b21e26f65a92b4d49bde032a" name="stunnel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71" rel="2.el9"/>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 5.62-3" date="1670500800">- Fix use of encrypted key files and password retry with OpenSSL 3
  Resolves: rhbz#2151888</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 5.71-1" date="1696507200">- New upstream release 5.71
  Resolves: RHEL-2468
- Enable socket activation support
- verify upstream source in %prep
- clean up stale conditionals</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 5.71-2" date="1722513600">- Speed up loading client CA list from CAfile
  Resolves: RHEL-52321
- Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
  Resolves: RHEL-52317</changelog>
</package>
<package pkgid="c7fbbbd5ebc70df49154f0812042ff2dd7cf6876d2038a19188e33dc8b1850bb" name="stunnel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71" rel="2.el9"/>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 5.62-3" date="1670500800">- Fix use of encrypted key files and password retry with OpenSSL 3
  Resolves: rhbz#2151888</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 5.71-1" date="1696507200">- New upstream release 5.71
  Resolves: RHEL-2468
- Enable socket activation support
- verify upstream source in %prep
- clean up stale conditionals</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 5.71-2" date="1722513600">- Speed up loading client CA list from CAfile
  Resolves: RHEL-52321
- Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
  Resolves: RHEL-52317</changelog>
</package>
<package pkgid="8c989f93a5b801ed6d6c026f328d9bb6dcbdc111d350263beb05352dc372674c" name="subscription-manager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.29.50" rel="1.el9.rocky.0.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.42-1" date="1724328000">- feat: forcefully switch automatic cloud registration to v1
  (ptoscano@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.43-1" date="1734609600">- [1.29] feat/cct-868: Subset of list command options marked as deprecated *
  Options --available, --all, --ondate, --servicelevel --no-overlap --match-
  install, --pool-only, --afterdate were marked as deprecated in ListCommand
  definition of their help string. (mgrunwal@redhat.com)
- fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
- feat: Better automatic registration logging (mhorky@redhat.com)
- fix: perform autoreg waiting when performing standard autoreg
  (ptoscano@redhat.com)
- chore: move autoreg waiting code in own function (ptoscano@redhat.com)
- docs: update proxy details in man page (jvlcek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.44-1" date="1737720000">- Revert "feat: Disable anonymous cloud registration temporarily"
  (ptoscano@redhat.com)
- Revert "feat: forcefully switch automatic cloud registration to v1"
  (ptoscano@redhat.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Update translation files (noreply@weblate.org)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (German) (atalanttore@googlemail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.45-1" date="1739275200">- fix: Do not upload profile from DNF, when it is disabled in conf
  (jhnidek@redhat.com)
- feat: dnf plugin - outsource uploading of profile to rhsmcertd.
  (jhnidek@redhat.com)
- feat: Enable register with environment names and environment types
  (jhnidek@redhat.com)
- feat: support registering specifying environments with activation keys
  (ryanverdile@gmail.com)
- chore: Remove auto-assign CI job (mhorky@redhat.com)
- feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.46-1" date="1747310400">- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Italian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Update translation files (noreply@weblate.org)
- fix: Handle improperly closed connections (mhorky@redhat.com)
- ci: use the right distro for coverage reporting (ptoscano@redhat.com)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (toscano.pino@tiscali.it)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- tests: fix mocking of get_terminal_width() in TestColumnize
  (ptoscano@redhat.com)
- feat: print compliance errors &amp; syspurpose status only in entitlement mode
  (ptoscano@redhat.com)
- feat: print "registered" as status when using SCA (ptoscano@redhat.com)
- feat: print "not registered" on status when not registered
  (ptoscano@redhat.com)
- tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
- refactor: move determination of content access mode in own method
  (ptoscano@redhat.com)
- tests: move StubIdentity to stubs (ptoscano@redhat.com)
- tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
- chore: move banner printing to its own function (ptoscano@redhat.com)
- fix: Append two additional facts to the graylist (pkoprda@redhat.com)
- refactor: Use class constant instead of variable graylist
  (pkoprda@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.47-1" date="1753963200">- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Spanish) (jsefler@redhat.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
- feat: [1.29] Call random.seed() at begining of auto-register
  (jhnidek@redhat.com)
- feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
- fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.48-1" date="1762344000">- Translated using Weblate (Korean) (simmon@nplob.com)
- ci: bump actions/upload-artifact from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
- fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
- ci: bump actions/checkout from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.49-1" date="1769515200">- RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
- fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
- feat: check if --set arg is empty when the environments module is called
  (manuelcanorojo@gmail.com)
- feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
- fix(test): Fix unit test of aws (jhnidek@redhat.com)
- fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
- chore: Make new black happy again (jhnidek@redhat.com)
- chore: Increased log level of messages (jhnidek@redhat.com)
- fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Added translation using Weblate (Finnish) (noreply-addon-
  languages@weblate.org)
- fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
- feat: added signature type log in TLS handshake (macano@redhat.com)
- feat: added internal method to get tls handshake info
  (manuelcanorojo@gmail.com)
- ci: bump actions/upload-artifact from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix profile upload because of missing self.cp (suttner@atix.de)
- Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
- ci: bump actions/checkout from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.50-1" date="1769601600">- fix: Print list of environments without --set/--list (jhnidek@redhat.com)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.29.50-1.rocky.0.1" date="1769774400">- Remove Red Hat references</changelog>
</package>
<package pkgid="f85ddf2c9f809fe61b27f4308b6fb4b6bac83c7d51482b93d8c79569eb308221" name="subscription-manager-debugsource" arch="x86_64">
  <version epoch="0" ver="1.29.50" rel="1.el9.rocky.0.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.42-1" date="1724328000">- feat: forcefully switch automatic cloud registration to v1
  (ptoscano@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.43-1" date="1734609600">- [1.29] feat/cct-868: Subset of list command options marked as deprecated *
  Options --available, --all, --ondate, --servicelevel --no-overlap --match-
  install, --pool-only, --afterdate were marked as deprecated in ListCommand
  definition of their help string. (mgrunwal@redhat.com)
- fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
- feat: Better automatic registration logging (mhorky@redhat.com)
- fix: perform autoreg waiting when performing standard autoreg
  (ptoscano@redhat.com)
- chore: move autoreg waiting code in own function (ptoscano@redhat.com)
- docs: update proxy details in man page (jvlcek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.44-1" date="1737720000">- Revert "feat: Disable anonymous cloud registration temporarily"
  (ptoscano@redhat.com)
- Revert "feat: forcefully switch automatic cloud registration to v1"
  (ptoscano@redhat.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Update translation files (noreply@weblate.org)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (German) (atalanttore@googlemail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.29.45-1" date="1739275200">- fix: Do not upload profile from DNF, when it is disabled in conf
  (jhnidek@redhat.com)
- feat: dnf plugin - outsource uploading of profile to rhsmcertd.
  (jhnidek@redhat.com)
- feat: Enable register with environment names and environment types
  (jhnidek@redhat.com)
- feat: support registering specifying environments with activation keys
  (ryanverdile@gmail.com)
- chore: Remove auto-assign CI job (mhorky@redhat.com)
- feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.46-1" date="1747310400">- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Italian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Update translation files (noreply@weblate.org)
- fix: Handle improperly closed connections (mhorky@redhat.com)
- ci: use the right distro for coverage reporting (ptoscano@redhat.com)
- New extraction for translatable strings (ptoscano@redhat.com)
- Translated using Weblate (Italian) (toscano.pino@tiscali.it)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- tests: fix mocking of get_terminal_width() in TestColumnize
  (ptoscano@redhat.com)
- feat: print compliance errors &amp; syspurpose status only in entitlement mode
  (ptoscano@redhat.com)
- feat: print "registered" as status when using SCA (ptoscano@redhat.com)
- feat: print "not registered" on status when not registered
  (ptoscano@redhat.com)
- tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
- refactor: move determination of content access mode in own method
  (ptoscano@redhat.com)
- tests: move StubIdentity to stubs (ptoscano@redhat.com)
- tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
- chore: move banner printing to its own function (ptoscano@redhat.com)
- fix: Append two additional facts to the graylist (pkoprda@redhat.com)
- refactor: Use class constant instead of variable graylist
  (pkoprda@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.47-1" date="1753963200">- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Spanish) (jsefler@redhat.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
- feat: [1.29] Call random.seed() at begining of auto-register
  (jhnidek@redhat.com)
- feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
- fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.48-1" date="1762344000">- Translated using Weblate (Korean) (simmon@nplob.com)
- ci: bump actions/upload-artifact from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
- fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
- ci: bump actions/checkout from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.49-1" date="1769515200">- RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
- fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
- feat: check if --set arg is empty when the environments module is called
  (manuelcanorojo@gmail.com)
- feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
- fix(test): Fix unit test of aws (jhnidek@redhat.com)
- fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
- chore: Make new black happy again (jhnidek@redhat.com)
- chore: Increased log level of messages (jhnidek@redhat.com)
- fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Added translation using Weblate (Finnish) (noreply-addon-
  languages@weblate.org)
- fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
- feat: added signature type log in TLS handshake (macano@redhat.com)
- feat: added internal method to get tls handshake info
  (manuelcanorojo@gmail.com)
- ci: bump actions/upload-artifact from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix profile upload because of missing self.cp (suttner@atix.de)
- Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
- ci: bump actions/checkout from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.29.50-1" date="1769601600">- fix: Print list of environments without --set/--list (jhnidek@redhat.com)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.29.50-1.rocky.0.1" date="1769774400">- Remove Red Hat references</changelog>
</package>
<package pkgid="72634a68db29bbf1a089f7f6d99c0daef1ee5ac2b46a99ff4265a1c4ddc0751a" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.17p2" rel="3.el9_8"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.9.5p2-13" date="1745582400">RHEL: 9.7.0 ERRATUM
- sudo missing spacing and separator in log when using "--preserve-env=list"
Resolves: RHEL-71916
- CVE-2025-32462 sudo: LPE via host option
Resolves: RHEL-100020</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-2" date="1763380800">- Request to backport support for regex in sudo [rhel-9]
Resolves: RHEL-1376
- Rebase of sudo to 1.9.17p2 [rhel-9]
Resolves: RHEL-128623
- sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
Resolves: RHEL-127359</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-3" date="1775736000">- CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166069</changelog>
</package>
<package pkgid="4234dbe3e77102563181f1a2235864694853d6f5b3da55284d3eed0c206c7434" name="sudo-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.17p2" rel="3.el9_8"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.9.5p2-13" date="1745582400">RHEL: 9.7.0 ERRATUM
- sudo missing spacing and separator in log when using "--preserve-env=list"
Resolves: RHEL-71916
- CVE-2025-32462 sudo: LPE via host option
Resolves: RHEL-100020</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-2" date="1763380800">- Request to backport support for regex in sudo [rhel-9]
Resolves: RHEL-1376
- Rebase of sudo to 1.9.17p2 [rhel-9]
Resolves: RHEL-128623
- sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
Resolves: RHEL-127359</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-3" date="1775736000">- CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166069</changelog>
</package>
<package pkgid="a98e1231d9ccf7fcdaf275d8370e8961184995d53de23838b9d9d62cfa50a7e4" name="symlinks-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="6.el9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhta.com&gt; - 1.7-1" date="1578484800">- 1.7, fixes #1786376.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ed014b9b0930ab235a3f4827d54c00cada0ed2cf87df33696c814e97470b53cc" name="symlinks-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7" rel="6.el9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhta.com&gt; - 1.7-1" date="1578484800">- 1.7, fixes #1786376.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8aa55a97c804120a19d95f6efcac5a736590a9d203f8a3b52a42802992d55535" name="sysfsutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.1" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83777</changelog>
</package>
<package pkgid="8d0761a2427a03fb134ed6d861b38ef372991201fb52f70480a6892cb9cf47e0" name="sysfsutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83777</changelog>
</package>
<package pkgid="ab1f7783ca4b01b80a10dadd3b6553ad74edcc969661eaefc159e4a14ff1d258" name="sysfsutils-debugsource" arch="i686">
  <version epoch="0" ver="2.1.1" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83777</changelog>
</package>
<package pkgid="61b7cdb09ef0fe3689b36428283e4a21d3033345ae353d094c329577113e2aee" name="sysfsutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="11.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83777</changelog>
</package>
<package pkgid="04ced97f97a8ef1770e972d6b52bf878275e53924914c8d4eb793f333d25d90e" name="syslinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.04" rel="0.23.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.22" date="1749816000">- isohybrid: Make GPT GUIDs reproducible with --uefi and --id
- Resolves: #RHEL-96214</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.23" date="1762344000">- Bump release number
- Resolves: #RHEL-96214</changelog>
</package>
<package pkgid="956b6dce37cc50e5a58e9577054d08c33a3441edccb19ca0670c24a7a48db511" name="syslinux-debugsource" arch="x86_64">
  <version epoch="0" ver="6.04" rel="0.23.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.22" date="1749816000">- isohybrid: Make GPT GUIDs reproducible with --uefi and --id
- Resolves: #RHEL-96214</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.23" date="1762344000">- Bump release number
- Resolves: #RHEL-96214</changelog>
</package>
<package pkgid="c09814ff434c60a7a1390f9797a6f0676a77109f17ae9ec686c2eb20e3f38b87" name="syslinux-extlinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.04" rel="0.23.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.22" date="1749816000">- isohybrid: Make GPT GUIDs reproducible with --uefi and --id
- Resolves: #RHEL-96214</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.23" date="1762344000">- Bump release number
- Resolves: #RHEL-96214</changelog>
</package>
<package pkgid="4bf1c00fcbf9edd87e9fe5e9755522932abbd2b5bfd5d031263bdf3f8392a624" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="48d8088ec17a893c710b3031130f132c3f47b39f3cbfa5074a93359ef5fed66d" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="6c217ebe1a9a41ab6d7234bc7adc516fb355bc79b1e1e992a918ea78a87e30ec" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="02dcbd13d1d3b5ecc05aa13c22144c4c35ecb958f3cff34e1500fb40f01adc73" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="942b039fd8e013340e03cb047bfd4978b4c7976435341081a6c5692ebc5747f6" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="d233d54d1a99967cfcde4f348c00ef809eee6d7c93efce91d4ec7a41594505d8" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="1c8d267d0e80e9afaca939304bf5d716e5aa58cff9cbda85e75d721ef06b4b71" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="6dfef1e360cf6d8641d7ab52bb30f83f85230f7ff87d65cfcfe8d99eb02ae2d5" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="4673b135b1de0dbf3f05030c0847abc7888ca0f9286b5e0e97e9535a2b45528f" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="af58ebd39d945585f563c5b94ca276e6e69708eafe378bc641d00db946a9b545" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="f70609239aaf35652bed78260b5388cc9e27400177bf23a38d85d262c69f26ec" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="68df6adc4fc84ca0a0e21eedf53c031f1018b0b296dd07e2157fb906ccc47786" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="0faea883480d98f4b5e238b9d450e93bf085c18a47bcdd7a294771c09b55df96" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="7add71ee1eb6e6bf33b5b0741cdabbf9471265a4963c16baea1cb68c25960296" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="721c755d6b370a496f558b554b8af26dc3afc2d686178a57bb8a06125ef28673" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="37b1b25f99a1a98476c67cb1e0d183b26d8c5a590f582967e75e7842fe1f830b" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="4f2cb708f40084c28830c8d6d3bc4a7227f13ff72e4cb129a4d55f80a7590042" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="2abae43557ce8e9bdd8a7430d94b8c572d01a32ca67fc44dc9f936295520d05b" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="7423e0dcbe8fe67cbd91a68e889cb7604c166aea267c2eab2484a21c6702d65c" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="eaa68c702a86f8d94c77b3d68d1896aaeeb9ad0147c32701e0495e07b7d3b136" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="8c3191f48ce6825f9f32632d4fdc8a8b4d7b57cedb773d9a7b34a08ef0eb1085" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="fba60104ded6a7c10131e8dfa8959ae24dcda018d4b682de01fdfabb5ca6aa83" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="37f8d6cc532037f49a12a17f4deaa9346a33465ca22ff498b08d324ddf7cf93f" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="84e52cd02895a27dc20cf41d4a734640fc268f7aeada0a6ecdda318701e993fa" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="2b58ac09f9244a8ef46c09004f3a704fd7794b7cb78bbbc9dab1eccf74947cb9" name="systemd-oomd-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="5af3ba2e3323748c2b9908370179cf1c04dabf40229d93f40e6a293b3b809101" name="systemd-oomd-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="4ba75b9a839bac46908fb91ce047d24306dfe50ee101e2038efb9d013468b04c" name="systemd-oomd-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="33a1a2263caaafdf9e59b7335b1d9885fc4947df27ef5afe59d2ae81e30089c0" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="542626e55b2849a7c227cd24e3d881dfbd952b6e8c0c5d22993e55339bfdc1de" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="8b0b3c1071fab031051178ac0b57e940670c1829f83f42d5d195c3710ef7533f" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="fc90c284dedc76a75d5f305f931e9b39a55953f034bcf318d7570253929cb948" name="systemd-resolved-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="ff694a89d79bb2897b3e6f3587a86ac1d0735de631eb8e7cd253ff2d88d8d4a1" name="systemd-resolved-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="35bb9fda9e0af626aa59cc9738cf6422377927134248a9c9eb8f86bdb02dadab" name="systemd-resolved-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="4296f368b2c711c8294c1a2ecde540713428b95aceec26eadfbbd89ef4c0a778" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-59" date="1759406400">- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
- test: check the next elapse timer timestamp after deserialization (RHEL-118215)
- timer: don't run service immediately after restart of a timer (RHEL-118215)
- test: store and compare just the property value (RHEL-118215)
- test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
- basic: add PIDFS magic (#31709) (RHEL-114974)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-60" date="1762344000">- man: fix a missing word (RHEL-115182)
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
- cryptsetup: fix typo (RHEL-97175)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.rocky.0.1" date="1771848002">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="bcbd381f0f2ee1a0b7a3b0fa1d0c8179054a6c295e381bcd2f451329f54f0335" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.2.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.2.rocky.0.1" date="1780228800">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="6c7467aa4609cded2ddc79ce3644723cf5c8e08b986971db6d3a713d6c8437f2" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="252" rel="67.el9_8.4.rocky.0.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 252-67.4.rocky.0.1" date="1782216000">- Set support URL to the wiki
- Set sbat mail to security@rockylinux.org</changelog>
</package>
<package pkgid="831ef12578c9cccbdca70e9e5f80ac18dfcf06a7bf33323be66712d2586c5181" name="tar-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.34" rel="11.el9"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:1.34-7" date="1723723200">- Warn “file changed as we read it” less often</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-8" date="1765540800">- Backport upstream changes to jailify extraction directory
  Includes related gnulib changes to add openat2
  Fixes CVE-2025-45582</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-9" date="1766145600">- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
  also, fix another tiny mistake in the patch (w/o visible consequences)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-10" date="1768219200">- Backport fix for regression in the --no-overwrite-dir option
  Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
  in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-11" date="1771848000">- Add upstream patch to improve error message for --one-top-level
  with absolute path (unsupported as a result of CVE-2025-45582 fix)</changelog>
</package>
<package pkgid="e77f35663dd67e517d8b746025ac05fc41d30444dbd36a4f019d2dc68b317b49" name="tar-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.34" rel="13.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-8" date="1765540800">- Backport upstream changes to jailify extraction directory
  Includes related gnulib changes to add openat2
  Fixes CVE-2025-45582</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-9" date="1766145600">- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
  also, fix another tiny mistake in the patch (w/o visible consequences)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-10" date="1768219200">- Backport fix for regression in the --no-overwrite-dir option
  Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
  in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-11" date="1771848000">- Add upstream patch to improve error message for --one-top-level
  with absolute path (unsupported as a result of CVE-2025-45582 fix)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-12" date="1787313600">- Backport upstream fix for CVE-2026-5704 (file injection hidden from -t)
- Fix --one-top-level with absolute path (broken by the CVE-2025-45582 fix)
  Also fixes CVE-2026-18508 (escape from --one-top-level via hardlinks).
- Upstream fix for build with libacl 2.4.0</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-13" date="1787572800">- Backport upstream patches for CVE-2026-18477, fixes a bug
  where incremental restore with cyclic renames between backups
  may create a temporary directory at an archive-controlled path
  outside the extraction tree.
  The fix for CVE-2025-45582 already prevents exploiting
  this problem, so it is more a correctness and hardening change.</changelog>
</package>
<package pkgid="bf93608df6997aeddeda8689196cd0aa7f38db4e5c75dcda09c18b630d5a5829" name="tar-debugsource" arch="x86_64">
  <version epoch="2" ver="1.34" rel="11.el9"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:1.34-7" date="1723723200">- Warn “file changed as we read it” less often</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-8" date="1765540800">- Backport upstream changes to jailify extraction directory
  Includes related gnulib changes to add openat2
  Fixes CVE-2025-45582</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-9" date="1766145600">- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
  also, fix another tiny mistake in the patch (w/o visible consequences)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-10" date="1768219200">- Backport fix for regression in the --no-overwrite-dir option
  Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
  in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-11" date="1771848000">- Add upstream patch to improve error message for --one-top-level
  with absolute path (unsupported as a result of CVE-2025-45582 fix)</changelog>
</package>
<package pkgid="0957ea4e96a730eafb44786c2a1140ec687a5202f7ab7b45bff42084ead2b490" name="tar-debugsource" arch="x86_64">
  <version epoch="2" ver="1.34" rel="13.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-8" date="1765540800">- Backport upstream changes to jailify extraction directory
  Includes related gnulib changes to add openat2
  Fixes CVE-2025-45582</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-9" date="1766145600">- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
  also, fix another tiny mistake in the patch (w/o visible consequences)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-10" date="1768219200">- Backport fix for regression in the --no-overwrite-dir option
  Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
  in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-11" date="1771848000">- Add upstream patch to improve error message for --one-top-level
  with absolute path (unsupported as a result of CVE-2025-45582 fix)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-12" date="1787313600">- Backport upstream fix for CVE-2026-5704 (file injection hidden from -t)
- Fix --one-top-level with absolute path (broken by the CVE-2025-45582 fix)
  Also fixes CVE-2026-18508 (escape from --one-top-level via hardlinks).
- Upstream fix for build with libacl 2.4.0</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-13" date="1787572800">- Backport upstream patches for CVE-2026-18477, fixes a bug
  where incremental restore with cyclic renames between backups
  may create a temporary directory at an archive-controlled path
  outside the extraction tree.
  The fix for CVE-2025-45582 already prevents exploiting
  this problem, so it is more a correctness and hardening change.</changelog>
</package>
<package pkgid="42afe37aae04dffa068f461bfd1b84a3f01c1a489fb3ea018d8355e8ea431767" name="tboot-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.11.10" rel="1.el9"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.1-2" date="1699444800">- Rebase to upstream 1.11.2 and bump the NVR.
  Resolves: RHEL-16022</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.3-1" date="1714046400">Rebase to upstream 1.11.3 and bump the NVR.
  Resolves: RHEL-34941</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.9-1" date="1732017600">Rebase to upstream 1.11.9 and bump the nvr
  Resolves: RHEL-67949</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.10-1" date="1758024000">- Update to latest upstream
  Add tboot-disa-ibt.patch (see https://issues.redhat.com/browse/RHEL-109479)
  Resolves: RHEL-97661</changelog>
</package>
<package pkgid="23f4654846492f3467eb272a523a759040cc9381be7f9fbb0931de3481249a1a" name="tboot-debugsource" arch="x86_64">
  <version epoch="1" ver="1.11.10" rel="1.el9"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.1-2" date="1699444800">- Rebase to upstream 1.11.2 and bump the NVR.
  Resolves: RHEL-16022</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.3-1" date="1714046400">Rebase to upstream 1.11.3 and bump the NVR.
  Resolves: RHEL-34941</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.9-1" date="1732017600">Rebase to upstream 1.11.9 and bump the nvr
  Resolves: RHEL-67949</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.11.10-1" date="1758024000">- Update to latest upstream
  Add tboot-disa-ibt.patch (see https://issues.redhat.com/browse/RHEL-109479)
  Resolves: RHEL-97661</changelog>
</package>
<package pkgid="3913f2313a3577e9788b366b420b7bfa5d4efc9489616f4eab7d16ccfe19579b" name="tcl-debuginfo" arch="x86_64">
  <version epoch="1" ver="8.6.10" rel="7.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1:8.6.10-5" date="1597924800">- Re-enable LTO</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1:8.6.10-6" date="1628251200">- Rebuild to pick up new build flags from redhat-rpm-config (#1984652)</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1:8.6.10-7" date="1658232000">- Rebuilt for i686 release
  Resolves: rhbz#2099397</changelog>
</package>
<package pkgid="717ecff2b5ac2765c16354adb277699ec9c20301e3551fd58e5f821976b2c515" name="tcl-debugsource" arch="x86_64">
  <version epoch="1" ver="8.6.10" rel="7.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1:8.6.10-5" date="1597924800">- Re-enable LTO</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1:8.6.10-6" date="1628251200">- Rebuild to pick up new build flags from redhat-rpm-config (#1984652)</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1:8.6.10-7" date="1658232000">- Rebuilt for i686 release
  Resolves: rhbz#2099397</changelog>
</package>
<package pkgid="74e3e9cc36811a2059f6a632618c41af865058017f6b5a061aea6cdf3d27c10d" name="tdb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="1.el9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.9-1" date="1701691200">- resolves: RHEL-16480 - Rebase to version 1.4.9</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-1" date="1713960000">- resolves: RHEL-33756 - Rebase to version 1.4.10</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727438400">- Update to version 1.4.12
- resolves: RHEL-59791</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-1" date="1747656000">- Update to version 1.4.13
- resolves: RHEL-89880</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-1" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114549</changelog>
</package>
<package pkgid="847b630e156712fe61d8c8f1cb775dfdface07e8b3951b506e6daea43246e18e" name="teamd-debuginfo" arch="i686">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="94c7b694c556b968b87e492cc6d926b257bcb1d01d0da8c4bfdf51fc1cfb73b1" name="teamd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="abfa9eeb3c87cb82e822d8859e8c7d01387f76c5c6c52b755f31945fe55374ea" name="texinfo-debugsource" arch="x86_64">
  <version epoch="0" ver="6.7" rel="15.el9"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 6.7-6" date="1583409600">- add additional Provides: tex-texinfo ("it's an older code sir, but it checks out")</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 6.7-7" date="1584360000">- Add BR: perl(Unicode::Normalize)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.7-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.7-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-10" date="1612267200">- Fix problem in shell code found by ShellCheck in test script</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.7-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.7-12" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-13" date="1644494400">- Fix issues found by static analysis
  Resolves: #1938884</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-14" date="1645012800">- Rebuild
  Related: #1938884</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.7-15" date="1645444800">- Rebuild
  Related: #1938884</changelog>
</package>
<package pkgid="8fdd6b636b45a2fa15e45680a75582b2bc0acdf301156d90ae84f99e457504aa" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9" rel="18.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-9" date="1594641600">- Clarify RSS size as kibibytes in a documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-10" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-11" date="1605096000">- Do not leak a file descriptor of the --output argument to a command</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-12" date="1605528000">- Fix a regression in closing a file descriptor if no --output was given
  (bug #1898138)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-13" date="1610539200">- Update URL and Source addresses (thanks to Robert Scheck)
- Verify an upstream archive signature</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-14" date="1610539201">- Correct version in an info page
- Set time stamp stored in an info page to the latest patch</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-15" date="1610539202">- Retrieve a time stamp of the info page from a patch date header</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9-18" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="445371d9a9d913f556d940b509cd82c2b4389523119b8572b1b1e61976db9cad" name="time-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9" rel="18.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-9" date="1594641600">- Clarify RSS size as kibibytes in a documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-10" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-11" date="1605096000">- Do not leak a file descriptor of the --output argument to a command</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-12" date="1605528000">- Fix a regression in closing a file descriptor if no --output was given
  (bug #1898138)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-13" date="1610539200">- Update URL and Source addresses (thanks to Robert Scheck)
- Verify an upstream archive signature</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-14" date="1610539201">- Correct version in an info page
- Set time stamp stored in an info page to the latest patch</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.9-15" date="1610539202">- Retrieve a time stamp of the info page from a patch date header</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9-18" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="67d210b2d829a2869db5b4a4ea6e7e2955e8e03daa832afdb2a1bd54625d25dc" name="tmux-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2a" rel="5.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1c-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1c-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-1" date="1630497600">- Upgrade to tmux-3.2a (CVE-2020-27347)
  Resolves: rhbz#1910707</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-2" date="1632312000">- Ensure gating test files are present in the source repo
  Related: rhbz#1910707</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-3" date="1632744000">- Rebuild
  Related: rhbz#1910707</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-4" date="1638532800">- Rebuild
  Resolves: rhbz#2003007</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.2a-5" date="1681128000">- Backport a number of memory leak fixes
  Resolves: rhbz#1938885</changelog>
</package>
<package pkgid="3b3b0acb479d20bd6aa43d468e57ca1c2e2f38979a530b6df34863ada380e2af" name="tmux-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2a" rel="5.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1c-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1c-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-1" date="1630497600">- Upgrade to tmux-3.2a (CVE-2020-27347)
  Resolves: rhbz#1910707</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-2" date="1632312000">- Ensure gating test files are present in the source repo
  Related: rhbz#1910707</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-3" date="1632744000">- Rebuild
  Related: rhbz#1910707</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.2a-4" date="1638532800">- Rebuild
  Resolves: rhbz#2003007</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.2a-5" date="1681128000">- Backport a number of memory leak fixes
  Resolves: rhbz#1938885</changelog>
</package>
<package pkgid="53d491be302ab12931cffbe9e614b4c2aa838f723eae39d4490368c794bd5da1" name="tpm2-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2" rel="7.el9"/>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 5.2-4" date="1718798400">- Backport upstream fixes.
- tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
- tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
- Fix check of magic number.
  Resolves: RHEL-23198
  Resolves: RHEL-41031
  Resolves: RHEL-41035</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@centosproject.org&gt; - 5.2-5" date="1742558400">- Backport upstream bugfix for tpm2_eventlog
  Resolves: RHEL-83453</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 5.2-6" date="1745496000">- Backport upstream fixes.
  Resolves: RHEL-72772</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 5.2-7" date="1758196800">- Fix endianity issues.
  Resolves: RHEL-79885
  Resolves: RHEL-94933
  Resolves: RHEL-113400</changelog>
</package>
<package pkgid="7544d3911b9dff00716b4e7c1c79c48ad47622c08865d58f8cd36b18053afc29" name="tpm2-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="5.2" rel="7.el9"/>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 5.2-4" date="1718798400">- Backport upstream fixes.
- tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
- tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
- Fix check of magic number.
  Resolves: RHEL-23198
  Resolves: RHEL-41031
  Resolves: RHEL-41035</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@centosproject.org&gt; - 5.2-5" date="1742558400">- Backport upstream bugfix for tpm2_eventlog
  Resolves: RHEL-83453</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 5.2-6" date="1745496000">- Backport upstream fixes.
  Resolves: RHEL-72772</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 5.2-7" date="1758196800">- Fix endianity issues.
  Resolves: RHEL-79885
  Resolves: RHEL-94933
  Resolves: RHEL-113400</changelog>
</package>
<package pkgid="8b4c9fad7048308a6ef937227594f8fcb17f109c600ab7b9d8c9c0598396ec1c" name="tpm2-tss-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.3" rel="1.el9"/>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.0.3-8" date="1660132800">- Fix memory leaks, potential crashes, upgrade to OpenSSL 3
  Resolves: rhbz#2041919</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-1" date="1687521600">- Rebase to 3.2.2
- Use systemd-sysusers to create user
  Resolves: CVE-2023-22745
  Resolves: rhbz#2095479
  Resolves: rhbz#2160307
  Resolves: rhbz#2162613</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-2" date="1688385600">- Remove misapplied license
  Resolves: rhbz#2160307</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.3-1" date="1717070400">- Rebase to 3.2.3
  Resolves: RHEL-23206</changelog>
</package>
<package pkgid="ea244d598c81dec4cbb4e6aa1610b002ec755016c66afd193cb83c8bdd898bb4" name="tpm2-tss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="1.el9"/>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.0.3-8" date="1660132800">- Fix memory leaks, potential crashes, upgrade to OpenSSL 3
  Resolves: rhbz#2041919</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-1" date="1687521600">- Rebase to 3.2.2
- Use systemd-sysusers to create user
  Resolves: CVE-2023-22745
  Resolves: rhbz#2095479
  Resolves: rhbz#2160307
  Resolves: rhbz#2162613</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-2" date="1688385600">- Remove misapplied license
  Resolves: rhbz#2160307</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.3-1" date="1717070400">- Rebase to 3.2.3
  Resolves: RHEL-23206</changelog>
</package>
<package pkgid="911ec9756ef009d076159f101289e3eccb0c9ccb23f29e8c183ec7d36c7dff93" name="tpm2-tss-debugsource" arch="i686">
  <version epoch="0" ver="3.2.3" rel="1.el9"/>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.0.3-8" date="1660132800">- Fix memory leaks, potential crashes, upgrade to OpenSSL 3
  Resolves: rhbz#2041919</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-1" date="1687521600">- Rebase to 3.2.2
- Use systemd-sysusers to create user
  Resolves: CVE-2023-22745
  Resolves: rhbz#2095479
  Resolves: rhbz#2160307
  Resolves: rhbz#2162613</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-2" date="1688385600">- Remove misapplied license
  Resolves: rhbz#2160307</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.3-1" date="1717070400">- Rebase to 3.2.3
  Resolves: RHEL-23206</changelog>
</package>
<package pkgid="d7ad6ab4316ef6ee625dad7f022d971738a675c2b1f747498e2e322c00f9cada" name="tpm2-tss-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="1.el9"/>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.0.3-8" date="1660132800">- Fix memory leaks, potential crashes, upgrade to OpenSSL 3
  Resolves: rhbz#2041919</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-1" date="1687521600">- Rebase to 3.2.2
- Use systemd-sysusers to create user
  Resolves: CVE-2023-22745
  Resolves: rhbz#2095479
  Resolves: rhbz#2160307
  Resolves: rhbz#2162613</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.2-2" date="1688385600">- Remove misapplied license
  Resolves: rhbz#2160307</changelog>
  <changelog author="&#x160;t&#x11B;p&#xE1;n Hor&#xE1;&#x10D;ek &lt;shoracek@redhat.com&gt; - 3.2.3-1" date="1717070400">- Rebase to 3.2.3
  Resolves: RHEL-23206</changelog>
</package>
<package pkgid="d47729b028908150a696de7f61230cffd5782c4e3a512352586312bc1c7eb2d4" name="trace-cmd-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.1" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="9a8a61070d8e77b47dd403a4e0d6d84ad9f1e10c34d909053b2ca58f901c508b" name="trace-cmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="c7bb48e804c74b05e85fa777eaede0db9c0c2adc17a31c119bb25f0faad4673c" name="trace-cmd-debugsource" arch="i686">
  <version epoch="0" ver="3.3.1" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="7b99542ca9135ca982a2a68d360ddd8d44613ea96ccd4fd1cfc4edc6df41897f" name="trace-cmd-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="d0723fb8e4f920823a0ef26f64f206babec10126a70c8bbcd858e6015b506360" name="traceroute-debuginfo" arch="x86_64">
  <version epoch="3" ver="2.1.1" rel="1.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.0-17" date="1698667200">- fix improper command line parsing (CVE-2023-46316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.0-18" date="1701086400">- add gating.yaml</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.0-19" date="1726660800">- make traceroute follow RFC-3484 conditionally (RHEL-58449)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.1-1" date="1733140800">- rebase to 2.1.1 (RHEL-67117)
    Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

	   There are no ipv4-mapped addresses in the real network which we
	   operate on, so use just ipv4 in such cases, but allow users
	   to specify it this way for convenience.

	  Return back more robast poll(2) loop handling.</changelog>
</package>
<package pkgid="fd8729537627bb6c55e3da0574a3775d17cfbeb5f9a736d8c670c3bee980be46" name="traceroute-debugsource" arch="x86_64">
  <version epoch="3" ver="2.1.1" rel="1.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.0-17" date="1698667200">- fix improper command line parsing (CVE-2023-46316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.0-18" date="1701086400">- add gating.yaml</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.0-19" date="1726660800">- make traceroute follow RFC-3484 conditionally (RHEL-58449)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 3:2.1.1-1" date="1733140800">- rebase to 2.1.1 (RHEL-67117)
    Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

	   There are no ipv4-mapped addresses in the real network which we
	   operate on, so use just ipv4 in such cases, but allow users
	   to specify it this way for convenience.

	  Return back more robast poll(2) loop handling.</changelog>
</package>
<package pkgid="6b2cc3d5d10be89a91d8e32b0d2c80238be7892fe10ef94309fcd284d904b52a" name="tree-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-4" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-8" date="1630670400">- source package renamed to tree-pkg to make it work with Pagure and Gitlab</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-10" date="1631880000">- reflect review comments from Fedora Review (#2001467)</changelog>
</package>
<package pkgid="d04a82ae4fd835f09ec5b0d2d93980877c2cdac1eb7d58383c67b4c4db0057d1" name="tree-pkg-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-4" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-8" date="1630670400">- source package renamed to tree-pkg to make it work with Pagure and Gitlab</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-10" date="1631880000">- reflect review comments from Fedora Review (#2001467)</changelog>
</package>
<package pkgid="6b18c235e4c9d36245830f07d9d923bc85ec34b6fb6d3c051b8ea5e06588a79e" name="tss2-debuginfo" arch="i686">
  <version epoch="1" ver="1.6.0" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 1.6.0-1" date="1612785600">- Rebase to v1.6.0 release.
- Manpage cleanup.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-3" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-5" date="1643371200">- Fix failures introduced with OpenSSL 3
  Resolves: rhbz#1984621
  Resolves: rhbz#1992339</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-6" date="1656504000">- Restrict SHA-1 usage
  Resolves: rhbz#2060768</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-7" date="1657281600">- Version bump
  Resolves: rhbz#2060768</changelog>
</package>
<package pkgid="bbf968c7af76a1fce7bab6d3a79ef7f1b1725cfb84256d041dfe2ea7d06429fc" name="tss2-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.6.0" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 1.6.0-1" date="1612785600">- Rebase to v1.6.0 release.
- Manpage cleanup.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-3" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-5" date="1643371200">- Fix failures introduced with OpenSSL 3
  Resolves: rhbz#1984621
  Resolves: rhbz#1992339</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-6" date="1656504000">- Restrict SHA-1 usage
  Resolves: rhbz#2060768</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-7" date="1657281600">- Version bump
  Resolves: rhbz#2060768</changelog>
</package>
<package pkgid="0cabd709c00d8c4514e136729b691cee7d1b7385e054b49fd7423ea2f7d06a1c" name="tss2-debugsource" arch="i686">
  <version epoch="1" ver="1.6.0" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 1.6.0-1" date="1612785600">- Rebase to v1.6.0 release.
- Manpage cleanup.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-3" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-5" date="1643371200">- Fix failures introduced with OpenSSL 3
  Resolves: rhbz#1984621
  Resolves: rhbz#1992339</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-6" date="1656504000">- Restrict SHA-1 usage
  Resolves: rhbz#2060768</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-7" date="1657281600">- Version bump
  Resolves: rhbz#2060768</changelog>
</package>
<package pkgid="b663c973c4dddcbddbb16df21453f4f7415d5f9f4426d3ffd12dd8f54b7fd76a" name="tss2-debugsource" arch="x86_64">
  <version epoch="1" ver="1.6.0" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 1.6.0-1" date="1612785600">- Rebase to v1.6.0 release.
- Manpage cleanup.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-3" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-5" date="1643371200">- Fix failures introduced with OpenSSL 3
  Resolves: rhbz#1984621
  Resolves: rhbz#1992339</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-6" date="1656504000">- Restrict SHA-1 usage
  Resolves: rhbz#2060768</changelog>
  <changelog author="Stepan Horacek &lt;shoracek@redhat.com&gt; - 1:1.6.0-7" date="1657281600">- Version bump
  Resolves: rhbz#2060768</changelog>
</package>
<package pkgid="46d47a9abdcedb5c7de4d2964a487bb654396156fd96b470df782e9d7fd27c6c" name="units-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.21" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.20-1" date="1601553600">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.21-1" date="1605528000">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.21-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.21-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6ce2f96bbd72f30d287da2bc8c2cfe99c4763926a0b2bd021c03a542ede9f5ec" name="units-debugsource" arch="x86_64">
  <version epoch="0" ver="2.21" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.20-1" date="1601553600">- new upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 2.21-1" date="1605528000">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.21-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.21-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5ca56c029169469faf85a67c93280a9fc7f92f52f4e41f06a39dbdc0c6a84181" name="unzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="60.el9_8"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-57" date="1720008000">- Fix: Unzip Fails on Large Zip Files
- Use the patch from Debian dealing with this
Resolves: RHEL-45994</changelog>
  <changelog author="Matteo Croce &lt;teknoraver@meta.com&gt; - 6.0-58" date="1727179200">- Fix obscure invalid memory access in zipinfo
Resolves: RHEL-60054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-59" date="1744027200">- Allow decompression of some wrongly compressed files
Resolves: RHEL-86228</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-60" date="1760097600">- Another zipbomb patch (ported from c10s)
Related: RHEL-6272</changelog>
</package>
<package pkgid="5cf353ce20f688bccf3b1d716cf85a05d7d615a675d83ed5746d9460e8d1e610" name="unzip-debugsource" arch="x86_64">
  <version epoch="0" ver="6.0" rel="60.el9_8"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-57" date="1720008000">- Fix: Unzip Fails on Large Zip Files
- Use the patch from Debian dealing with this
Resolves: RHEL-45994</changelog>
  <changelog author="Matteo Croce &lt;teknoraver@meta.com&gt; - 6.0-58" date="1727179200">- Fix obscure invalid memory access in zipinfo
Resolves: RHEL-60054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-59" date="1744027200">- Allow decompression of some wrongly compressed files
Resolves: RHEL-86228</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-60" date="1760097600">- Another zipbomb patch (ported from c10s)
Related: RHEL-6272</changelog>
</package>
<package pkgid="3a24287eadb0ecc09616bab07d596b7560d2dbd5b336adb19c5b0ab785171711" name="usb_modeswitch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-5" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 2.6.0-1" date="1585051200">- New 2.6.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.6.0-3" date="1601380800">- Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.6.1-1" date="1605700800">- Update usb_modeswitch to 2.6.1
- Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&amp;t=2733
- Drop BR jimtcl-devel, if we don't install dynlink-dispatcher</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f1f533983bfae864a455677ccd212d960e7a767491d188a0111ca9598f1eaccc" name="usb_modeswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-5" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 2.6.0-1" date="1585051200">- New 2.6.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.6.0-3" date="1601380800">- Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.6.1-1" date="1605700800">- Update usb_modeswitch to 2.6.1
- Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&amp;t=2733
- Drop BR jimtcl-devel, if we don't install dynlink-dispatcher</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e83248ca212219c2cb9e2ce882fdfd3516f0e8103127bef4a18bce71c87d740c" name="usbutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="018" rel="1.el9"/>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 017-1" date="1707048000">- Update to 017
  Resolves: RHEL-23148</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 018-1" date="1742817600">- Update to 018
  Resolves: RHEL-72233</changelog>
</package>
<package pkgid="84c91a33c1fec059ef3898c2afa7b5a2ee439ea445e08e7696cc185acb8feff6" name="usbutils-debugsource" arch="x86_64">
  <version epoch="0" ver="018" rel="1.el9"/>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 017-1" date="1707048000">- Update to 017
  Resolves: RHEL-23148</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 018-1" date="1742817600">- Update to 018
  Resolves: RHEL-72233</changelog>
</package>
<package pkgid="248d102b9b9bf202fd5638dc136a8a703e507d046e3c2dc0c1c9cba878cbb8e1" name="usermode-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.114" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.114-5" date="1722945600">- fix static analysis findings (RHEL-27043)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.114-6" date="1737979200">- do not (double) free environ as glibc may want to do that (RHEL-76332)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.114-7" date="1752062400">- do not crash when missing action argument (RHEL-90414)</changelog>
</package>
<package pkgid="fd7f6f6a0c68ccaf363d6a885d68d4ff3d37b35dcd512b268c9af185c82d0d4b" name="usermode-debugsource" arch="x86_64">
  <version epoch="0" ver="1.114" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.114-5" date="1722945600">- fix static analysis findings (RHEL-27043)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.114-6" date="1737979200">- do not (double) free environ as glibc may want to do that (RHEL-76332)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.114-7" date="1752062400">- do not crash when missing action argument (RHEL-90414)</changelog>
</package>
<package pkgid="6640ff8f98d492e24dfd2099e7660d5560ae90d58dd1632e89c7a1259f2b2a4e" name="userspace-rcu-debuginfo" arch="i686">
  <version epoch="0" ver="0.12.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.1-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.0-1" date="1586865600">- New upstream release</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.1-1" date="1587556800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.12.1-5" date="1618833600">- Replace arch-dependent /usr/include/urcu/config.h with arch-independent
  stub when needed. (bz# 1951223)
- Added CI gating tests
- Resolves: bz #1951223</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b06ade573ebab1c14729250e6460982f5ee68bae4ae13f0e307c4fe2774d51a3" name="userspace-rcu-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.1-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.0-1" date="1586865600">- New upstream release</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.1-1" date="1587556800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.12.1-5" date="1618833600">- Replace arch-dependent /usr/include/urcu/config.h with arch-independent
  stub when needed. (bz# 1951223)
- Added CI gating tests
- Resolves: bz #1951223</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="30250aebb57360fb1733da9ba37cb6db76fee3caffd9693699afee6a31ff9f54" name="userspace-rcu-debugsource" arch="i686">
  <version epoch="0" ver="0.12.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.1-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.0-1" date="1586865600">- New upstream release</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.1-1" date="1587556800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.12.1-5" date="1618833600">- Replace arch-dependent /usr/include/urcu/config.h with arch-independent
  stub when needed. (bz# 1951223)
- Added CI gating tests
- Resolves: bz #1951223</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="66cb1fdbf0db789bde3e1897576df66c23dc775cd6a8485a76aa412fef5774c9" name="userspace-rcu-debugsource" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.1-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.0-1" date="1586865600">- New upstream release</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 0.12.1-1" date="1587556800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.12.1-5" date="1618833600">- Replace arch-dependent /usr/include/urcu/config.h with arch-independent
  stub when needed. (bz# 1951223)
- Added CI gating tests
- Resolves: bz #1951223</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12.1-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="df4696588d821255d8f7e9556c140e51408400f219486f6d9cc49faacc1bf544" name="util-linux-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="3807b25fa2c73585e7cd171e309935b6dd1ec23104a6bd3b9b5a7599014db04e" name="util-linux-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="5897b7504106d4f3cf3c8d3d21da85f5cea89779afbb3dd1bf2ef5ad562d84c3" name="util-linux-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="7026fec5d4ab68e44b3fdcd038eb899a1cd37dd81aaf043b1e8977feddc9f412" name="util-linux-debugsource" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="db977e3900d9dfd9aaeede0dd19494a9285564fd7e4f720076d0b9c8f65a094f" name="util-linux-debugsource" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="22dee96556c2bbb512a824b9b52403a70fcd9070f5553dd78202086aedb2a164" name="util-linux-user-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="dfb82994b3435b6ef31c21c89c02d14a4f9b05068d2e548ebb89fd748028af51" name="vdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.2.2.2" rel="1.el9"/>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.0.264-1" date="1627560000">- Rebased to upstream candidate.
- Related: rhbz#1955374</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.0.316-1" date="1628424000">- Rebased to upstream candidate.
- Resolves: rhbz#1955374
- Removed all python based tools, and all management should now be done with
  LVM.
- Resolves: rhbz#1949159
- vdostats is now a C program
- Resolves: rhbz#1972302</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1.0.316-1.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.1.287-1" date="1642939200">- Fixed off-by-one issue in vdostats.
- Resolves: rhbz#1999056
- Improved error handling and path validation in vdostats.
- Resolves: rhbz#2004576</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.1.360-1" date="1644667200">- Fixed vdostats output issues.
- Resolves: rhbz#2004576
- Removed incorrect assumptions about major device numbers in vdostats.
- Resolves: rhbz#2045885
- Made improvements to the vdorecover script.
- Resolves: rhbz#2047543
- Added a tool to make LVMVDO pools read/write so that support and
  debugging tools may access them.
- Resolves: rhbz#2047543</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.2.0.2-1" date="1658232000">- Rebased to latest upstream candidate.
- Resolves: rhbz#2071648</changelog>
  <changelog author="- Susan LeGendre-McGhee - 8.2.2.2-1" date="1687348800">- Updated manpages.
- Resolves: rhbz#2176778</changelog>
</package>
<package pkgid="23449027b09696d6c401344567e703fdd22c9356fbd2c0ba123617a6187d41ab" name="vdo-debugsource" arch="x86_64">
  <version epoch="0" ver="8.2.2.2" rel="1.el9"/>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.0.264-1" date="1627560000">- Rebased to upstream candidate.
- Related: rhbz#1955374</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.0.316-1" date="1628424000">- Rebased to upstream candidate.
- Resolves: rhbz#1955374
- Removed all python based tools, and all management should now be done with
  LVM.
- Resolves: rhbz#1949159
- vdostats is now a C program
- Resolves: rhbz#1972302</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1.0.316-1.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.1.287-1" date="1642939200">- Fixed off-by-one issue in vdostats.
- Resolves: rhbz#1999056
- Improved error handling and path validation in vdostats.
- Resolves: rhbz#2004576</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.1.360-1" date="1644667200">- Fixed vdostats output issues.
- Resolves: rhbz#2004576
- Removed incorrect assumptions about major device numbers in vdostats.
- Resolves: rhbz#2045885
- Made improvements to the vdorecover script.
- Resolves: rhbz#2047543
- Added a tool to make LVMVDO pools read/write so that support and
  debugging tools may access them.
- Resolves: rhbz#2047543</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.2.0.2-1" date="1658232000">- Rebased to latest upstream candidate.
- Resolves: rhbz#2071648</changelog>
  <changelog author="- Susan LeGendre-McGhee - 8.2.2.2-1" date="1687348800">- Updated manpages.
- Resolves: rhbz#2176778</changelog>
</package>
<package pkgid="f430b430807e0a270b07c7674ee8275829996d47aed2ce8ef76f21af7df97ec4" name="vdo-support-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.2.2.2" rel="1.el9"/>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.0.264-1" date="1627560000">- Rebased to upstream candidate.
- Related: rhbz#1955374</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.0.316-1" date="1628424000">- Rebased to upstream candidate.
- Resolves: rhbz#1955374
- Removed all python based tools, and all management should now be done with
  LVM.
- Resolves: rhbz#1949159
- vdostats is now a C program
- Resolves: rhbz#1972302</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1.0.316-1.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.1.287-1" date="1642939200">- Fixed off-by-one issue in vdostats.
- Resolves: rhbz#1999056
- Improved error handling and path validation in vdostats.
- Resolves: rhbz#2004576</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.1.1.360-1" date="1644667200">- Fixed vdostats output issues.
- Resolves: rhbz#2004576
- Removed incorrect assumptions about major device numbers in vdostats.
- Resolves: rhbz#2045885
- Made improvements to the vdorecover script.
- Resolves: rhbz#2047543
- Added a tool to make LVMVDO pools read/write so that support and
  debugging tools may access them.
- Resolves: rhbz#2047543</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 8.2.0.2-1" date="1658232000">- Rebased to latest upstream candidate.
- Resolves: rhbz#2071648</changelog>
  <changelog author="- Susan LeGendre-McGhee - 8.2.2.2-1" date="1687348800">- Updated manpages.
- Resolves: rhbz#2176778</changelog>
</package>
<package pkgid="5d8898e7505877ca96d8788d58d8ab6c40525924b229f3dad2bcf4c5f8d02fcb" name="veritysetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="44d2d9988f43cf5e1220a855bce724c456444295c3fe7696397692e84c676671" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="1abffc13135eafbf533c96aae9c3ef5b3446e64d9ed7efc4af122979d33ba43d" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="dcea963ae08b400a0230f1e5c51ffb1f49c54f15e7297be17fd5ac8fcb54b04b" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-21" date="1722859200">- RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-22" date="1740484800">- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
</package>
<package pkgid="4c4f7b068cab5c2e31405d469ff4b957fd910e0248df3fb2d38cd0811bbcb0f4" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-22" date="1740484800">- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
</package>
<package pkgid="2a96145a662d38c964a7d6614917f4097de457eb23d00277942b22dc379536eb" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="cd01df200b51ac7733e8af5b6f2d44f1b70998f2a1c1996ba5f4a009e70b403c" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="4a69c9126442cae0833d14c475bdd1c4f139016f3647b857b703ed91e0eb9af3" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="97e12e9f9ef1901a81fd52f4a24571408ef61a5d7ca9b5f0824352763f86c0c4" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-21" date="1722859200">- RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-22" date="1740484800">- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
</package>
<package pkgid="ec046c75db73fa408f19e6424325cb930ba290571f85b5d9ff5c409a94937e1f" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-22" date="1740484800">- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
</package>
<package pkgid="2cde90ad953db5a3fc9d6e4d91f04eb21468e558851839362a76afb0d641377d" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="026e6b51cf7cb5b4bb17d0ab48634100173119fcaf473d7022eadded246c8573" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="b40dda6d946b8b1ec2177a003e735d58e0bc30da329b93b856c7d7fb240c43c2" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="c022e627cd6f85c056686beca44a0ed723e5ae364e058d58715a509fa9b6848c" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-21" date="1722859200">- RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-22" date="1740484800">- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
</package>
<package pkgid="a4f27d3e8817c89c0c0880014b9e3dd711b9c4757a46df97e7aef74c07fce1fd" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-22" date="1740484800">- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
</package>
<package pkgid="93c5215de593fbc97c492b1b1a6755a5b18aa758bd32b0da7a0dd558b747c6f1" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="feefd98b816ea5721a4433b0e0ace4446578199230fe44f7ad28ee7aade76411" name="virt-what-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.27" rel="2.el9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-4" date="1686225600">- Don't match Nutanix-based baremetal systems
  resolves: rhbz#2211980</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-5" date="1687953600">- Add support for CRI-O containers
  resolves: rhbz#2218203</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-6" date="1719921600">- Add support for Azure VMs on ARM
  resolves: RHEL-45834</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-8" date="1722340800">- Add virt-what-cvm tool
  resolves: RHEL-50659</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-10" date="1723550400">- Implement virt-what-cvm for s390x
  related: RHEL-50659</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.27-1" date="1725278400">- Rebase to Fedora Rawhide
  resolves: RHEL-56807</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.27-2" date="1746532800">- Rebase to Fedora Rawhide
- Enable virt-what to detect WSL2
  resolves: RHEL-89793</changelog>
</package>
<package pkgid="f4aa9a21c56220478ec12502adab317d20f17841bbe6a9bac097681c5f0bedc3" name="virt-what-debugsource" arch="x86_64">
  <version epoch="0" ver="1.27" rel="2.el9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-4" date="1686225600">- Don't match Nutanix-based baremetal systems
  resolves: rhbz#2211980</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-5" date="1687953600">- Add support for CRI-O containers
  resolves: rhbz#2218203</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-6" date="1719921600">- Add support for Azure VMs on ARM
  resolves: RHEL-45834</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-8" date="1722340800">- Add virt-what-cvm tool
  resolves: RHEL-50659</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.25-10" date="1723550400">- Implement virt-what-cvm for s390x
  related: RHEL-50659</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.27-1" date="1725278400">- Rebase to Fedora Rawhide
  resolves: RHEL-56807</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.27-2" date="1746532800">- Rebase to Fedora Rawhide
- Enable virt-what to detect WSL2
  resolves: RHEL-89793</changelog>
</package>
<package pkgid="b5319904e2f91d3e2962bfa4e365136edb6cb65f5a21e4d9ac3cc05bca164f91" name="which-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.21" rel="30.el9_6"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.21-30" date="1751889600">- Add a check to ensure that /proc/$$/exe can be read
  thanks to mbliss@redhat.com for the report and the proposed patch
  Resolves: RHEL-101066</changelog>
</package>
<package pkgid="c61f2e704eb314d36f890be03a4fc81c368412b98e272d00f39266481ef08371" name="which-debugsource" arch="x86_64">
  <version epoch="0" ver="2.21" rel="30.el9_6"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.21-30" date="1751889600">- Add a check to ensure that /proc/$$/exe can be read
  thanks to mbliss@redhat.com for the report and the proposed patch
  Resolves: RHEL-101066</changelog>
</package>
<package pkgid="2aa062894cfd7bda7a241de8febec58b7e954eecde4be4d508583bbf14905bbe" name="wpa_supplicant-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.11" rel="2.el9"/>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.10-5" date="1708603200">- Support macsec HW offload.
  Resolves: RHEL-22440
- Backport fix for PEAP client (CVE-2023-52160)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.11-1" date="1732795200">- Update to upstream version 2.11 (plus a follow-up backport)
  Resolves: RHEL-10237, RHEL-58725</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.11-2" date="1739448000">- Enable CONFIG_IEEE80211BE (RHEL-10237)</changelog>
</package>
<package pkgid="5ec8244418bf825777c38ba72d1a8080b7ec02ca3dd8d0fc773fd58a43807ca5" name="wpa_supplicant-debugsource" arch="x86_64">
  <version epoch="1" ver="2.11" rel="2.el9"/>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.10-5" date="1708603200">- Support macsec HW offload.
  Resolves: RHEL-22440
- Backport fix for PEAP client (CVE-2023-52160)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.11-1" date="1732795200">- Update to upstream version 2.11 (plus a follow-up backport)
  Resolves: RHEL-10237, RHEL-58725</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.11-2" date="1739448000">- Enable CONFIG_IEEE80211BE (RHEL-10237)</changelog>
</package>
<package pkgid="805c6874b10f9ca95bfc60dc0d3ca36fb510ffa3a5db28507679602a2d41bc1a" name="x3270-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0ga14" rel="2.el9"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.6ga12-1" date="1586606400">- updated to 3.6ga12 (#1823121)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga9-1" date="1590753600">- updated to 4.0ga9 (#1840492)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga10-1" date="1595851200">- updated to 4.0ga10 (#1860639)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0ga10-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga11-1" date="1597752000">- updated to 4.0ga11 (#1869461)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga12-1" date="1601294400">- updated to 4.0ga12 (#1882956)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga13-1" date="1609761600">- updated to 4.0ga13 (#1911117)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0ga13-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga14-1" date="1612180800">- updated to 4.0ga14 (#1922848)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga14-2" date="1614600000">- update BRs (#1933647)</changelog>
</package>
<package pkgid="4ac5bb2e3ea6e59e438e47d76d8457861d1469de9a7a450ab1602de303d3b712" name="x3270-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0ga14" rel="2.el9"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.6ga12-1" date="1586606400">- updated to 3.6ga12 (#1823121)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga9-1" date="1590753600">- updated to 4.0ga9 (#1840492)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga10-1" date="1595851200">- updated to 4.0ga10 (#1860639)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0ga10-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga11-1" date="1597752000">- updated to 4.0ga11 (#1869461)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga12-1" date="1601294400">- updated to 4.0ga12 (#1882956)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga13-1" date="1609761600">- updated to 4.0ga13 (#1911117)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0ga13-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga14-1" date="1612180800">- updated to 4.0ga14 (#1922848)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga14-2" date="1614600000">- update BRs (#1933647)</changelog>
</package>
<package pkgid="61c541e279d8b567ff33287eba3b82a049e76572ffb1116d6ba2bf11b6902837" name="x3270-text-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0ga14" rel="2.el9"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.6ga12-1" date="1586606400">- updated to 3.6ga12 (#1823121)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga9-1" date="1590753600">- updated to 4.0ga9 (#1840492)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga10-1" date="1595851200">- updated to 4.0ga10 (#1860639)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0ga10-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga11-1" date="1597752000">- updated to 4.0ga11 (#1869461)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga12-1" date="1601294400">- updated to 4.0ga12 (#1882956)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga13-1" date="1609761600">- updated to 4.0ga13 (#1911117)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0ga13-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga14-1" date="1612180800">- updated to 4.0ga14 (#1922848)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 4.0ga14-2" date="1614600000">- update BRs (#1933647)</changelog>
</package>
<package pkgid="d984debca2694207319c957a86bd3ad3a9e001cd55d7618cd25072060b428880" name="xfsdump-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.12" rel="4.el9_3"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.10-1" date="1644580800">- New upstream release
- Resolve issue with bind mounts / root inode mismatch (#2034324)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-1" date="1681732800">- New upstream release
- Use Cem's pgp key instead of Eric's
  Related: rhbz#2181660</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-2" date="1681819200">- rebuilt, Fix wrongly associated bugzilla
  Related: rhbz#2181660</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-3" date="1687780800">- xfsdump: restoring inventory prevents non-directory files being restored from tape,
- actually fixed by rebase to 3.1.12
- related: bz#2166557
- xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
- related: bz#2034327</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-4" date="1698321600">- xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
- Related: RHEL-14038</changelog>
</package>
<package pkgid="e9eb554cceb174eda84f84b143b045dfe14220b16b3b93a225892e0622ed277c" name="xfsdump-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.12" rel="4.el9_3"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.10-1" date="1644580800">- New upstream release
- Resolve issue with bind mounts / root inode mismatch (#2034324)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-1" date="1681732800">- New upstream release
- Use Cem's pgp key instead of Eric's
  Related: rhbz#2181660</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-2" date="1681819200">- rebuilt, Fix wrongly associated bugzilla
  Related: rhbz#2181660</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-3" date="1687780800">- xfsdump: restoring inventory prevents non-directory files being restored from tape,
- actually fixed by rebase to 3.1.12
- related: bz#2166557
- xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
- related: bz#2034327</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.12-4" date="1698321600">- xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
- Related: RHEL-14038</changelog>
</package>
<package pkgid="8e3ad5f7036d7e9f821fdd800dea77058329ff075d5458553b45aef3a7818156" name="xfsprogs-debuginfo" arch="i686">
  <version epoch="0" ver="6.4.0" rel="7.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-3" date="1687262400">- Fix man page default for sparse mkfs option (#2216118)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-4" date="1690977600">- Fix man page, mkfs.xfs(8): Update section on dax+reflink
- compatibility (#2226900)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.3.0-1" date="1699876800">- Rebase to upstream version 6.3.0
-
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
- xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
- xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
-
- Rename the remaining patches so the name contains upstream version in which
- they are implemented, or "rhelonly".
-
- Drop Eric Sandeen's public key used to check tarball signature and replace it by
- Carlos Maiolino's (current upstream xfsprogs maintainer).
-
- Following is a list of newly backported patches from versions released after 6.3
- which are fixing patches present in version 6.3:
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
-
- Backport:
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
- to implement RHEL-RHEL-8284
-
- Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
- to implement RHEL-7900
-
- Related: RHEL-15399
- Related: RHEL-8284
- Related: RHEL-7900</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-1" date="1716206400">- Rebase to a more recent upstream release
- Related: RHEL-28339
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
- xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
-
- Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
-	version it was merged in.</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-2" date="1719403200">- Fix various CVE issues.
- Related: RHEL-32996
- Following is the patch list:
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
- xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-3" date="1720699200">- Fix coverity issue
- Related: RHEL-39449
- Following is the patch list:
- xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-4" date="1723723200">- xfs_repair: allow symlinks with short remote targets
- Related: RHEL-54306 and RHEL-53164</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-5" date="1734436800">- Fix missing rpm db entry for: /usr/share/xfsprogs
- Related: RHEL-39450</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-6" date="1746532800">- xfs unrepairable filesystem if directory block not junked in phase 3
- Related: RHEL-54342</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-7" date="1747137600">- xfs unrepairable filesystem if directory block not junked in phase 3 - more
- fixes
- Related: RHEL-54342</changelog>
</package>
<package pkgid="6d933baaaa7d4180b4845749fd3a7185c92f809224e5810386b8feefd5813729" name="xfsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="7.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-3" date="1687262400">- Fix man page default for sparse mkfs option (#2216118)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-4" date="1690977600">- Fix man page, mkfs.xfs(8): Update section on dax+reflink
- compatibility (#2226900)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.3.0-1" date="1699876800">- Rebase to upstream version 6.3.0
-
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
- xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
- xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
-
- Rename the remaining patches so the name contains upstream version in which
- they are implemented, or "rhelonly".
-
- Drop Eric Sandeen's public key used to check tarball signature and replace it by
- Carlos Maiolino's (current upstream xfsprogs maintainer).
-
- Following is a list of newly backported patches from versions released after 6.3
- which are fixing patches present in version 6.3:
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
-
- Backport:
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
- to implement RHEL-RHEL-8284
-
- Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
- to implement RHEL-7900
-
- Related: RHEL-15399
- Related: RHEL-8284
- Related: RHEL-7900</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-1" date="1716206400">- Rebase to a more recent upstream release
- Related: RHEL-28339
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
- xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
-
- Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
-	version it was merged in.</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-2" date="1719403200">- Fix various CVE issues.
- Related: RHEL-32996
- Following is the patch list:
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
- xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-3" date="1720699200">- Fix coverity issue
- Related: RHEL-39449
- Following is the patch list:
- xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-4" date="1723723200">- xfs_repair: allow symlinks with short remote targets
- Related: RHEL-54306 and RHEL-53164</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-5" date="1734436800">- Fix missing rpm db entry for: /usr/share/xfsprogs
- Related: RHEL-39450</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-6" date="1746532800">- xfs unrepairable filesystem if directory block not junked in phase 3
- Related: RHEL-54342</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-7" date="1747137600">- xfs unrepairable filesystem if directory block not junked in phase 3 - more
- fixes
- Related: RHEL-54342</changelog>
</package>
<package pkgid="238e85db82ab985cfeffa1c7470f6f5a8d39bbe09801b5a66e1ad8074e71c859" name="xfsprogs-debugsource" arch="i686">
  <version epoch="0" ver="6.4.0" rel="7.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-3" date="1687262400">- Fix man page default for sparse mkfs option (#2216118)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-4" date="1690977600">- Fix man page, mkfs.xfs(8): Update section on dax+reflink
- compatibility (#2226900)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.3.0-1" date="1699876800">- Rebase to upstream version 6.3.0
-
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
- xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
- xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
-
- Rename the remaining patches so the name contains upstream version in which
- they are implemented, or "rhelonly".
-
- Drop Eric Sandeen's public key used to check tarball signature and replace it by
- Carlos Maiolino's (current upstream xfsprogs maintainer).
-
- Following is a list of newly backported patches from versions released after 6.3
- which are fixing patches present in version 6.3:
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
-
- Backport:
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
- to implement RHEL-RHEL-8284
-
- Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
- to implement RHEL-7900
-
- Related: RHEL-15399
- Related: RHEL-8284
- Related: RHEL-7900</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-1" date="1716206400">- Rebase to a more recent upstream release
- Related: RHEL-28339
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
- xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
-
- Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
-	version it was merged in.</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-2" date="1719403200">- Fix various CVE issues.
- Related: RHEL-32996
- Following is the patch list:
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
- xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-3" date="1720699200">- Fix coverity issue
- Related: RHEL-39449
- Following is the patch list:
- xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-4" date="1723723200">- xfs_repair: allow symlinks with short remote targets
- Related: RHEL-54306 and RHEL-53164</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-5" date="1734436800">- Fix missing rpm db entry for: /usr/share/xfsprogs
- Related: RHEL-39450</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-6" date="1746532800">- xfs unrepairable filesystem if directory block not junked in phase 3
- Related: RHEL-54342</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-7" date="1747137600">- xfs unrepairable filesystem if directory block not junked in phase 3 - more
- fixes
- Related: RHEL-54342</changelog>
</package>
<package pkgid="d8320dad8f4dd7c3bd4b07a7401d8819b3fe9ee68e0e6cca6861f7fc67e9a10e" name="xfsprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="7.el9"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-3" date="1687262400">- Fix man page default for sparse mkfs option (#2216118)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 5.19.0-4" date="1690977600">- Fix man page, mkfs.xfs(8): Update section on dax+reflink
- compatibility (#2226900)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.3.0-1" date="1699876800">- Rebase to upstream version 6.3.0
-
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
- xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
- xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
- xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
- xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
-
- Rename the remaining patches so the name contains upstream version in which
- they are implemented, or "rhelonly".
-
- Drop Eric Sandeen's public key used to check tarball signature and replace it by
- Carlos Maiolino's (current upstream xfsprogs maintainer).
-
- Following is a list of newly backported patches from versions released after 6.3
- which are fixing patches present in version 6.3:
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
-
- Backport:
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
- to implement RHEL-RHEL-8284
-
- Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
- to implement RHEL-7900
-
- Related: RHEL-15399
- Related: RHEL-8284
- Related: RHEL-7900</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-1" date="1716206400">- Rebase to a more recent upstream release
- Related: RHEL-28339
- Following is a list of dropped backported patches which
- are contained in the current rebase:
- xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
- xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
- xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
- xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
- xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
- xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
- xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
- xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
-
- Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
-	version it was merged in.</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-2" date="1719403200">- Fix various CVE issues.
- Related: RHEL-32996
- Following is the patch list:
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
- xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
- xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
- xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
- xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch</changelog>
  <changelog author="Bill O'Donnell &lt;bodonnel@redhat.com&gt; - 6.4.0-3" date="1720699200">- Fix coverity issue
- Related: RHEL-39449
- Following is the patch list:
- xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-4" date="1723723200">- xfs_repair: allow symlinks with short remote targets
- Related: RHEL-54306 and RHEL-53164</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-5" date="1734436800">- Fix missing rpm db entry for: /usr/share/xfsprogs
- Related: RHEL-39450</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-6" date="1746532800">- xfs unrepairable filesystem if directory block not junked in phase 3
- Related: RHEL-54342</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 6.4.0-7" date="1747137600">- xfs unrepairable filesystem if directory block not junked in phase 3 - more
- fixes
- Related: RHEL-54342</changelog>
</package>
<package pkgid="b91cc691881d76f54d0465af1e8d22aec411658572498e821e5f2520ab91ee45" name="xz-debuginfo" arch="i686">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="90f560ca83485ab3df861f2a06b850e52b81fed8f2d65717fa2dd92f3a860c07" name="xz-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="718ca936bd6c39315d6bace8c44390b72d11eb0c112c835bd1da26891627da5e" name="xz-debugsource" arch="i686">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="8d345ea9a80880d6e36d78c9176399a6c11d2d649a00c826e93d07860bc345f5" name="xz-debugsource" arch="x86_64">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="52a90d6e00fd36c0185935aaa6285d80454ea24957ae04cd60e41821cd18276d" name="xz-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="abb8d1c3140ab9713e7bb7646fda76b8d38251a4ed7b109278e145eb48f5c4be" name="xz-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="58a1c5b7f515d4336998806f367acfc924da891ec4c9e1d7730bb0800afaae6e" name="zip-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0" rel="35.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0-30" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-31" date="1643803200">- Add the missing linker flags
- Add the patch that allows to configure the linker flags from the spec file
  Resolves: rhbz #2044902</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-32" date="1643889600">- Enable gating tests
  Related: rhbz#2049738</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-33" date="1644926400">- Disable the asm implementation of some functions and use the C instead
- This should fix some of the annocheck issues
  Related: rhbz#2044902</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-34" date="1675166400">- Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
Resolves: rhbz#2162688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-35" date="1676376000">- Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
Related: rhbz#2162688</changelog>
</package>
<package pkgid="91527cc4c3221f586225d8f82861d63956b04919fbaacedcb0fee72f0c944c53" name="zip-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0" rel="35.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0-30" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-31" date="1643803200">- Add the missing linker flags
- Add the patch that allows to configure the linker flags from the spec file
  Resolves: rhbz #2044902</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-32" date="1643889600">- Enable gating tests
  Related: rhbz#2049738</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-33" date="1644926400">- Disable the asm implementation of some functions and use the C instead
- This should fix some of the annocheck issues
  Related: rhbz#2044902</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-34" date="1675166400">- Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
Resolves: rhbz#2162688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.0-35" date="1676376000">- Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
Related: rhbz#2162688</changelog>
</package>
<package pkgid="e8887908367a2a724a58902a3eeb860f8956a81073588d0046db4384d0e1abd8" name="zlib-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.11" rel="40.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.11-31" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-32" date="1646136000">- Fix for IBM compressBound() rhbz#2056899</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-33" date="1650888000">- Fix CVE-2018-25032
  Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-34" date="1660132800">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-35" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-36" date="1671451200">- Inflate small window optimization for IBM z15 rhbz#2154775</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-37" date="1675771200">- Rebased Power 8 optimization patches
- Fix for Unnecessary IFUNC resolver for crc32_z
- Fix for python3.11 broken libxml2 and lxml on s390x</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-38" date="1675771201">- Resolve fuzzing issue for unknown memory access</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-39" date="1675944000">- Fix covscan issue CWE-681</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-40" date="1683201600">- Fix the Crash in zlib deflateBound() function on s390x
- Resolves: BZ#2193044</changelog>
</package>
<package pkgid="d830c81d20b897dbd785b83a7f7406b39293bfd6a3f39a9c2902011580d1f3e4" name="zlib-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="40.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.11-31" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-32" date="1646136000">- Fix for IBM compressBound() rhbz#2056899</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-33" date="1650888000">- Fix CVE-2018-25032
  Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-34" date="1660132800">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-35" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-36" date="1671451200">- Inflate small window optimization for IBM z15 rhbz#2154775</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-37" date="1675771200">- Rebased Power 8 optimization patches
- Fix for Unnecessary IFUNC resolver for crc32_z
- Fix for python3.11 broken libxml2 and lxml on s390x</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-38" date="1675771201">- Resolve fuzzing issue for unknown memory access</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-39" date="1675944000">- Fix covscan issue CWE-681</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-40" date="1683201600">- Fix the Crash in zlib deflateBound() function on s390x
- Resolves: BZ#2193044</changelog>
</package>
<package pkgid="24d75acf373a199de932df0542b102d7c24bd2519b075b62b6fd3c67a1f23321" name="zlib-debugsource" arch="i686">
  <version epoch="0" ver="1.2.11" rel="40.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.11-31" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-32" date="1646136000">- Fix for IBM compressBound() rhbz#2056899</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-33" date="1650888000">- Fix CVE-2018-25032
  Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-34" date="1660132800">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-35" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-36" date="1671451200">- Inflate small window optimization for IBM z15 rhbz#2154775</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-37" date="1675771200">- Rebased Power 8 optimization patches
- Fix for Unnecessary IFUNC resolver for crc32_z
- Fix for python3.11 broken libxml2 and lxml on s390x</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-38" date="1675771201">- Resolve fuzzing issue for unknown memory access</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-39" date="1675944000">- Fix covscan issue CWE-681</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-40" date="1683201600">- Fix the Crash in zlib deflateBound() function on s390x
- Resolves: BZ#2193044</changelog>
</package>
<package pkgid="db74cf0abc7ca317ca05970a37ba721f2a1fa76dfb7ac079e02d706dd8e48b79" name="zlib-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="40.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.11-31" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-32" date="1646136000">- Fix for IBM compressBound() rhbz#2056899</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-33" date="1650888000">- Fix CVE-2018-25032
  Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-34" date="1660132800">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-35" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-36" date="1671451200">- Inflate small window optimization for IBM z15 rhbz#2154775</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-37" date="1675771200">- Rebased Power 8 optimization patches
- Fix for Unnecessary IFUNC resolver for crc32_z
- Fix for python3.11 broken libxml2 and lxml on s390x</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-38" date="1675771201">- Resolve fuzzing issue for unknown memory access</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-39" date="1675944000">- Fix covscan issue CWE-681</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-40" date="1683201600">- Fix the Crash in zlib deflateBound() function on s390x
- Resolves: BZ#2193044</changelog>
</package>
<package pkgid="782bda57180a070fcc5c31af87fe4689c40133867eeb92bc88b93a6701544774" name="zsh-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.8" rel="9.el9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-1" date="1582545600">- update to latest upstream release</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 5.8-2" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8-4" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-5" date="1616673600">- complete file arguments after rpmbuild -r/-b/-t</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.8-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.8-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 5.8-8" date="1637841600">- Overwrite PROMPT only if it's set to the built-in default (#2026749)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-9" date="1645531200">- do not perform PROMPT_SUBST evaluation on %F/%K arguments (CVE-2021-45444)</changelog>
</package>
<package pkgid="b6a25bcda61ccb2370265e8b5c9741706ec7aa318626d04f8f60b04a470de07e" name="zsh-debugsource" arch="x86_64">
  <version epoch="0" ver="5.8" rel="9.el9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-1" date="1582545600">- update to latest upstream release</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 5.8-2" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8-4" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-5" date="1616673600">- complete file arguments after rpmbuild -r/-b/-t</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.8-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.8-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 5.8-8" date="1637841600">- Overwrite PROMPT only if it's set to the built-in default (#2026749)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-9" date="1645531200">- do not perform PROMPT_SUBST evaluation on %F/%K arguments (CVE-2021-45444)</changelog>
</package>
<package pkgid="d021c1c6279529c258f827e90e7806bcca1cb36829ea7b73b6571d94a301db82" name="zstd-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
<package pkgid="22a373fc190680d77114bf255e5bb8809982499aa88c2c16974274965f8f85fe" name="zstd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
<package pkgid="fb48adb7879921b680be84285c3d6e242ae0d7fb2cf62eb2cad6dfe427f1f010" name="zstd-debugsource" arch="i686">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
<package pkgid="a761c49465c2c88d078f7188a3956c0b9fc0939157a9d05d06433ec67668b983" name="zstd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
</otherdata>